Error: rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
File:                     CJu_po0WI_pGyRBDO-B2KT4_wrk.mft (raw, json)
Hash identifier:          Uoed+UkMVN3QzNqI87pcFICUU0dS0rUAtFH0bplNY2U=
Subject key identifier:   3B:71:02:0B:59:24:98:7D:75:49:30:39:59:73:2F:52:82:7C:B3:D0
Authority key identifier: 08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
Certificate issuer:       /CN=F365BE6BAF/serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
Certificate serial:       DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
Manifest number:          DD
Signing time:             Mon 21 Sep 2026 05:27:38 +0000
Manifest this update:     Mon 21 Sep 2026 05:27:37 +0000
Manifest next update:     Wed 23 Sep 2026 05:27:37 +0000
Files and hashes:         1: CJu_po0WI_pGyRBDO-B2KT4_wrk.crl (hash: PDRTsa0Xm9vJFy/LGtWL0DMAGGndjqafciZ7B8d8838=)
                          2: 66B396220A6211F192522FE2DAE4EC9C.roa (hash: lJkq355Hl6QyAz0aA6KQRws7nq8iUzZqbNSPzM4AiT8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE6BAF, serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
        Validity
            Not Before: Sep 21 05:27:37 2026 GMT
            Not After : Sep 23 05:27:37 2026 GMT
        Subject: CN=6ab0c04a-17c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:ff:db:6b:dc:b3:1c:1e:80:7a:a3:96:f6:
                    55:78:b1:0b:16:8d:bc:9f:27:d6:bc:7f:a5:9b:49:
                    3b:9a:a2:53:e3:46:95:fc:45:d6:48:22:72:dd:7f:
                    f2:e1:c6:c7:b2:ca:03:35:fb:39:eb:28:61:70:9e:
                    9a:5c:27:94:18:30:84:bc:ae:0b:23:f2:95:d4:cd:
                    09:a6:01:b3:24:76:f4:c7:5e:ea:99:21:9b:f8:c6:
                    55:4b:6a:1c:4f:50:1e:96:15:27:7e:ec:0e:73:f1:
                    e6:65:32:e7:8e:23:74:09:86:60:22:d0:fc:75:cb:
                    6d:87:e0:0c:df:98:15:de:62:ce:05:37:05:8a:5b:
                    d3:01:b5:d7:f4:43:4d:19:35:10:b2:59:2c:ec:f4:
                    54:c6:5b:f4:ae:12:79:bc:fc:55:07:5a:19:f5:ee:
                    d1:ba:31:17:58:ea:a3:30:b3:fe:de:68:dd:52:da:
                    30:e5:02:b2:08:d1:9b:9a:14:b5:ab:4b:07:ef:5c:
                    8f:2a:68:e6:1d:c4:c5:64:12:c8:41:e9:e6:59:65:
                    ef:7d:46:9a:d3:24:14:a6:89:6b:81:61:ce:16:e1:
                    92:d4:a3:fb:4b:e9:bb:6a:ea:2d:c7:ed:e9:01:1d:
                    58:7e:6f:72:b8:4c:61:d5:b3:5b:d7:ba:d8:aa:53:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:71:02:0B:59:24:98:7D:75:49:30:39:59:73:2F:52:82:7C:B3:D0
            X509v3 Authority Key Identifier:
                keyid:08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:54:7d:0f:1f:87:66:b3:be:9b:2f:14:e3:13:55:bd:aa:
         e1:b2:e6:4a:6f:b4:d4:b8:6c:df:b0:80:69:a5:6e:8c:e7:43:
         ee:0c:64:07:60:66:c0:0c:ca:99:8a:43:4b:2a:23:b5:30:7a:
         53:3e:69:ca:55:53:aa:3d:80:8e:25:65:2c:f6:c3:a3:96:f2:
         ac:bc:cc:d8:3f:bf:84:e0:46:11:ff:f1:c9:1e:d7:27:3a:81:
         e2:83:95:76:12:06:a6:8a:d9:c2:a9:2a:f0:bd:3d:77:fd:86:
         dd:3c:da:de:67:95:00:61:f5:46:6a:ed:98:cd:4b:d6:60:c0:
         e7:70:ee:c2:7c:3f:d6:b0:77:1c:1e:22:33:0b:17:ab:97:92:
         52:4c:bf:38:d7:1d:38:39:30:b5:84:e4:10:bf:7b:52:02:10:
         f2:4b:e6:6b:f6:65:a5:70:8a:b5:71:e8:94:70:81:9a:4b:79:
         1d:09:a3:d3:c9:cd:41:12:1f:4a:dd:39:b9:5d:38:0f:66:d9:
         a6:02:58:3f:35:a7:19:3e:f0:d9:a7:1d:c8:b6:9a:b2:61:cb:
         fb:b9:fa:09:de:7c:18:e6:73:5f:2c:db:ef:f4:d4:92:20:fa:
         61:90:8c:0c:b1:0a:f9:5c:fa:45:a9:f1:b5:1b:84:1a:b1:1d:
         7c:38:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:52:58 2026 by rpki-client