Error: rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          7mNTzw7Iz7YrL9ClcrqZFBPRGS1LNxddVqpsB37yPlw=
Subject key identifier:   A5:CD:4B:26:DF:8B:84:61:D7:19:D5:EB:07:DC:A0:6E:A1:7E:9F:80
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          0317
Signing time:             Mon 12 Oct 2026 04:25:47 +0000
Manifest this update:     Mon 12 Oct 2026 04:25:46 +0000
Manifest next update:     Wed 14 Oct 2026 04:25:46 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: 3U2F+tu6ts3yP8Vbl6wi9ekYBtN/DTniN/Dm8OSX8A4=)
                          2: 49D10B8AFB8411F085B74285DAE4EC9C.roa (hash: xN+oPTiqjHmtNSoRYq6a05dMRfGXblz8z65sbXo+yJw=)
                          3: 2E19ACFAFB7811F08E942FB9DAE4EC9C.roa (hash: BxJKHTfkRZri9Zx6qUjCr6DC+VJKH2KXb6afgCKVgm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 00:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Oct 12 04:25:46 2026 GMT
            Not After : Oct 14 04:25:46 2026 GMT
        Subject: CN=6acc614b-a60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:c4:a1:30:37:ad:e5:ee:4e:20:c0:fa:51:
                    13:8b:ed:2d:8a:9f:1d:63:b3:91:6d:4e:63:18:4a:
                    ed:62:e9:55:7d:f8:21:ba:68:7d:de:54:67:b9:c1:
                    c6:4a:f8:e9:9d:ae:19:ad:2f:78:c9:96:c0:09:cf:
                    46:d2:d1:30:27:2e:ab:d5:c0:cd:61:f4:85:75:b9:
                    a4:f6:0b:75:c4:10:73:61:29:b2:2f:42:91:bc:e4:
                    07:d3:aa:39:02:4d:3d:63:0b:75:39:cd:a8:9f:42:
                    04:67:bc:c6:90:c3:4f:0e:76:3c:98:57:7e:78:4b:
                    23:2c:ef:5f:76:2b:d2:63:50:05:a6:7f:6c:f4:ee:
                    35:43:e3:7d:d2:67:94:e1:a2:79:dd:91:27:af:6f:
                    40:8a:50:21:a7:c4:e5:59:d6:33:21:37:a6:9d:1c:
                    dd:04:51:01:da:e5:90:25:86:6f:46:d7:2c:6a:d8:
                    57:34:63:45:3e:89:62:d0:f7:29:38:3d:0c:5a:62:
                    6a:b6:18:b0:70:b3:7f:41:1b:60:f5:86:01:bf:6a:
                    00:35:3a:b5:7d:00:e2:e5:86:2b:55:a3:7e:a4:80:
                    d2:cf:5c:4e:4e:10:d5:a2:45:ef:e8:d8:e0:36:66:
                    c9:96:9c:e4:1f:cf:98:59:16:05:61:4b:91:74:b2:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:4B:26:DF:8B:84:61:D7:19:D5:EB:07:DC:A0:6E:A1:7E:9F:80
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:80:71:d4:fd:e8:08:31:52:0a:8e:49:88:3c:e5:a6:c7:98:
         40:ab:2a:b3:3f:2a:6b:ca:d7:9d:00:51:18:66:d3:8f:ba:a1:
         fe:ed:b3:7d:6a:37:47:e7:cb:73:ed:e1:b6:a6:91:a7:70:fd:
         2f:0c:49:4f:96:39:ca:e4:78:73:e9:27:11:8c:80:30:c6:95:
         c1:65:23:fd:56:cf:c5:a0:8d:74:d7:ec:11:dd:5c:8a:36:4e:
         dc:22:e6:ae:9f:b6:3c:34:24:f8:db:40:b4:cd:3e:97:67:6d:
         e3:63:44:67:07:e1:39:ba:7a:5e:92:c6:a5:19:0c:46:c2:64:
         6e:ed:6c:6a:7f:c2:27:ee:26:83:4f:31:de:43:8d:55:2a:65:
         1f:89:dc:15:d1:b3:47:e8:39:ea:d1:e2:61:62:50:40:ad:1e:
         da:ab:4d:9b:f8:35:2d:cf:9e:2c:62:9f:69:02:5e:07:d3:3c:
         15:db:2c:fd:60:3d:64:4b:ac:8d:39:ff:db:b8:9c:bd:c4:1a:
         62:f8:7e:bc:15:87:46:28:8c:2d:ca:b3:55:67:ad:f3:19:5b:
         8b:c5:57:b2:b3:01:68:57:b6:00:25:0c:28:15:f2:97:a4:43:
         92:80:e5:71:51:ff:7f:dc:64:91:67:31:d9:aa:77:7f:a9:30:
         3a:46:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:55:23 2026 by rpki-client