Error: rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
File:                     jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft (raw, json)
Hash identifier:          BFlRsiXLEoGy65Ja+s97aK7K7ScyqfI3JvVJxr7p15Y=
Subject key identifier:   BD:DF:41:47:2C:5D:48:5F:29:12:AE:BF:69:87:EE:27:3A:86:59:DA
Authority key identifier: 8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E
Certificate issuer:       /CN=F364A64DAF/serialNumber=8C1515F007123AA33ECCCF7ED5CFFB15AC73048E
Certificate serial:       0BAE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
Manifest number:          6667
Signing time:             Fri 09 Oct 2026 01:15:03 +0000
Manifest this update:     Fri 09 Oct 2026 01:15:02 +0000
Manifest next update:     Sun 11 Oct 2026 01:15:02 +0000
Files and hashes:         1: jBUV8AcSOqM-zM9-1c_7FaxzBI4.crl (hash: 3T01oXPwlwO2bzVIfviOg9YnPNo0FyV3Xn/Vp+OlEo4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 01:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2990 (0xbae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A64DAF, serialNumber=8C1515F007123AA33ECCCF7ED5CFFB15AC73048E
        Validity
            Not Before: Oct  9 01:15:02 2026 GMT
            Not After : Oct 11 01:15:02 2026 GMT
        Subject: CN=6ac84017-3470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:39:db:a9:8a:25:fb:a1:05:10:fc:05:8b:
                    73:a3:e1:0c:ca:36:73:d1:5d:81:96:a3:1d:12:9d:
                    4f:43:1f:02:a0:f2:c8:43:bc:bb:57:45:f0:21:b7:
                    d0:8e:60:d7:1e:29:62:e4:c3:02:76:09:eb:a8:1f:
                    28:0f:26:ea:cd:3e:4a:4f:62:6e:39:25:50:e8:b5:
                    c4:72:e0:72:bc:cf:6b:fa:fa:6f:59:fd:04:e4:4a:
                    cc:11:d6:cf:15:b4:63:bb:f7:ee:ac:7b:43:7c:82:
                    7e:ca:d6:7b:4a:3e:bd:06:d3:a2:b7:d3:4c:5b:73:
                    2c:62:56:14:c3:7b:40:e5:9c:11:dd:10:05:a3:db:
                    a1:5a:17:c5:08:ab:13:aa:db:44:8e:0a:92:63:9a:
                    76:f9:ba:6e:64:da:9e:74:83:b1:1d:11:fb:b9:3e:
                    ae:ab:f3:45:1c:0a:a7:6d:55:91:d3:3b:18:11:71:
                    53:8e:8a:13:ba:13:78:90:9c:51:e3:fd:e7:b7:24:
                    03:f6:e9:6e:4f:35:a2:c7:ba:56:30:f3:19:50:43:
                    fa:ef:65:1e:58:91:e2:2c:f4:fe:0c:ae:af:fd:e8:
                    05:50:54:af:28:cb:f5:d9:c9:fc:d8:bd:f2:61:64:
                    c2:c3:cd:44:66:a4:65:5b:3a:be:9d:b5:46:d9:52:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DF:41:47:2C:5D:48:5F:29:12:AE:BF:69:87:EE:27:3A:86:59:DA
            X509v3 Authority Key Identifier:
                keyid:8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:bf:e2:01:d4:b7:6b:9b:c3:a9:03:40:b6:40:6f:ea:d8:
         92:78:01:f0:57:09:af:93:31:b0:03:db:31:1e:6c:a6:97:e8:
         81:32:a9:98:a7:19:23:3e:ff:48:6f:59:2c:af:e5:0f:a8:22:
         00:fc:97:41:08:92:89:5a:42:fc:32:42:e4:73:35:62:6a:fa:
         ed:f1:24:72:88:02:85:42:c1:44:05:0b:77:81:53:20:df:11:
         63:68:2f:56:0a:4c:dc:48:a7:e1:c8:0a:61:2f:81:4b:58:65:
         40:e8:90:ca:17:6f:25:e5:b9:85:3e:2c:aa:e3:14:33:c9:f3:
         59:5d:8f:ab:81:b6:20:01:31:cc:fa:25:a6:14:fd:c4:76:fa:
         f4:ba:c4:92:c6:b0:1f:40:67:87:53:a4:85:43:1d:05:2f:3e:
         cd:58:7c:e7:36:62:27:c0:73:77:15:b7:9d:ef:e5:d7:ae:86:
         7e:32:82:e0:93:26:27:bc:15:5c:d4:32:f7:96:4f:ff:44:16:
         5e:19:30:4f:70:42:1e:79:c5:3b:10:30:18:3f:c5:4f:72:86:
         9b:cf:5c:26:ce:b9:30:4a:6f:8e:e5:89:a9:ca:8d:bc:16:bc:
         7b:e1:10:01:9c:11:93:77:e0:71:68:ce:ac:f0:7c:80:38:b1:
         14:6c:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:53:27 2026 by rpki-client