Error: rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
File:                     CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft (raw, json)
Hash identifier:          gBsdPS9QL2cn6lwdF8ntsRZsyI0R6fE1Atqxf9MzW/s=
Subject key identifier:   BD:29:9E:6A:DA:AD:5D:07:F3:A3:59:EA:A9:64:05:44:B1:CB:88:F4
Authority key identifier: 08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5
Certificate issuer:       /CN=F366C09ARI/serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
Certificate serial:       F1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
Manifest number:          F0
Signing time:             Tue 22 Sep 2026 05:24:26 +0000
Manifest this update:     Tue 22 Sep 2026 05:24:26 +0000
Manifest next update:     Thu 24 Sep 2026 05:24:26 +0000
Files and hashes:         1: CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl (hash: BoGECWzTV0ldDnnET7uiXAeuGWXH8/a6Z2iqiquiOmE=)
                          2: 60B3D06A00F411F1AD3841F3DAE4EC9C.roa (hash: /YeTGPkgq6IrMHXTQlAMTAiQfLyi9ZfWhHpJyJlkfy0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
                          rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C09ARI, serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
        Validity
            Not Before: Sep 22 05:24:26 2026 GMT
            Not After : Sep 24 05:24:26 2026 GMT
        Subject: CN=6ab2110a-8e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:05:da:f8:04:84:e6:4e:5b:1c:83:49:01:11:
                    5c:9c:89:d8:21:fb:66:b4:63:98:32:17:3a:52:57:
                    c6:8b:f9:66:ce:57:d0:13:09:5d:5c:d0:64:26:0f:
                    39:b6:3d:90:47:af:80:13:72:80:a7:79:50:80:24:
                    ff:79:3a:95:ac:13:f7:a7:d9:32:bd:09:91:9b:8b:
                    8c:20:dc:70:86:9d:43:f2:93:b2:de:dc:9d:27:64:
                    6c:60:fe:2a:9d:a1:28:ed:49:28:46:c3:e6:18:72:
                    4f:e2:cb:a2:d7:0b:6e:cd:ae:27:a6:b0:45:72:21:
                    9c:60:dd:70:74:7d:f7:44:14:8b:af:12:8f:7a:75:
                    ca:4d:92:29:81:ad:1a:24:8c:e7:9f:00:e9:3a:f3:
                    f9:eb:d9:06:e6:2b:04:10:e6:df:7d:ad:eb:61:c5:
                    58:29:a1:ca:ca:c3:eb:ea:b8:4d:dc:c3:73:2f:fc:
                    7e:26:50:d0:79:35:0a:7c:07:9f:45:50:69:19:4b:
                    61:5f:fa:0c:56:1a:c8:2a:42:c2:4a:07:d9:b4:77:
                    66:ce:49:b7:15:7d:ba:85:17:b3:e1:a1:31:2c:20:
                    31:9c:39:dd:02:b2:d1:60:b8:93:80:0a:84:9f:cc:
                    0d:6c:c8:50:03:4d:a9:a6:18:8e:6c:39:33:17:42:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:9E:6A:DA:AD:5D:07:F3:A3:59:EA:A9:64:05:44:B1:CB:88:F4
            X509v3 Authority Key Identifier:
                keyid:08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:be:14:fc:42:2e:0f:a5:fd:a8:c1:92:d6:91:a4:9f:1a:71:
         df:ba:38:4f:f8:d8:b3:6c:80:ff:4e:b3:88:16:73:3d:f8:89:
         e1:b0:22:58:e3:79:44:15:5f:ca:b5:2e:c3:47:f0:15:fd:71:
         ad:58:08:25:2a:0a:40:4a:f0:63:5a:37:f6:ca:b9:52:5c:a9:
         34:49:09:c8:5b:69:2b:44:4d:e9:67:a5:fd:f3:2d:78:26:e8:
         4b:69:ef:1b:43:84:70:66:1f:87:d4:cd:46:86:5c:e4:a5:53:
         47:13:51:ac:f6:6a:6f:a7:83:a5:b8:ee:5d:0c:79:85:f7:25:
         04:9f:ac:6d:46:d8:a0:9b:ea:14:ce:1f:2c:ab:c3:10:97:da:
         e8:a1:13:40:9a:45:34:c6:67:75:81:c6:dc:56:e5:8f:73:99:
         05:f7:a2:a9:2a:cc:06:08:58:83:da:34:07:58:47:4b:67:87:
         a5:c2:29:18:3e:2e:bb:65:cb:f4:78:c9:9a:4e:44:a6:0d:30:
         18:b0:ff:43:b6:c6:ef:4f:09:54:6d:80:d2:68:14:0a:af:58:
         ac:b2:90:41:c9:aa:8a:00:3a:32:74:d8:11:f1:83:32:b8:6f:
         5c:dd:f4:d6:5c:99:83:a7:5b:45:29:f0:91:a9:59:16:a5:76:
         b3:d4:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:58:36 2026 by rpki-client