Error: rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
File:                     FU_bBWSxN90ijzXfSvbkB4DvENY.mft (raw, json)
Hash identifier:          Q3yt0B2OtEAEBmS7sEcCPrzoQJN++uzR10cQsM79w+g=
Subject key identifier:   98:19:33:FE:B9:EE:DC:66:E4:38:30:83:25:94:99:E9:53:CB:15:E2
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Certificate issuer:       /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial:       096C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
Manifest number:          096A
Signing time:             Mon 21 Sep 2026 01:44:58 +0000
Manifest this update:     Mon 21 Sep 2026 01:44:57 +0000
Manifest next update:     Wed 23 Sep 2026 01:44:57 +0000
Files and hashes:         1: FU_bBWSxN90ijzXfSvbkB4DvENY.crl (hash: edUU28AvU42b5kqbzU0G8dblIWAVK2VZAv8bEYtiqfg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412 (0x96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683ABDAF, serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
        Validity
            Not Before: Sep 21 01:44:57 2026 GMT
            Not After : Sep 23 01:44:57 2026 GMT
        Subject: CN=6ab08c1a-00a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:3b:12:08:b7:3e:39:ae:1a:1f:88:df:22:
                    65:c9:8e:e3:1f:c6:6c:25:f4:0b:42:e6:20:8b:38:
                    3f:8e:11:2e:04:54:e8:aa:a7:0a:87:81:cf:7c:7f:
                    1e:64:38:b2:9e:e1:fa:c7:f7:58:78:f6:ca:51:39:
                    ff:73:a8:63:38:89:b4:f3:59:21:1d:8a:56:8d:2c:
                    e6:89:b5:96:0f:8b:c4:e4:c2:58:9d:24:a0:65:a5:
                    10:78:48:21:d7:f5:c4:90:cc:f8:61:68:bc:0d:ea:
                    65:2e:8f:0c:fa:b5:d2:82:95:40:f8:e3:1d:06:57:
                    cc:07:57:a0:90:54:01:32:f7:13:1c:98:8e:aa:c7:
                    42:f8:e0:18:1d:8f:a6:3e:96:ca:e9:ac:c4:42:f2:
                    26:f6:ea:19:60:ab:a7:21:c5:e8:29:21:8b:ff:6d:
                    9f:a7:f5:76:fa:68:71:59:67:c6:79:c0:fc:d7:92:
                    6b:a6:da:77:70:c0:2b:e9:e9:76:b0:3d:68:97:11:
                    96:af:37:dc:9a:ad:76:4a:4c:21:20:b8:a6:73:cd:
                    90:7a:98:d0:f1:95:cc:9e:cd:e1:ca:3f:80:8b:e5:
                    1f:22:8d:ba:ba:27:47:0a:ce:68:79:bd:b2:5d:7e:
                    64:2f:2e:f9:32:54:76:eb:0d:ae:23:dc:b4:b1:8f:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:19:33:FE:B9:EE:DC:66:E4:38:30:83:25:94:99:E9:53:CB:15:E2
            X509v3 Authority Key Identifier:
                keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:91:d8:be:18:f6:e2:d7:76:fc:01:16:c6:42:52:67:e0:59:
         c1:46:eb:a3:68:cd:7c:2c:0e:22:77:f3:de:e8:18:79:c4:a2:
         f5:3f:5b:e1:3d:bc:64:59:c7:4b:89:51:db:ec:03:01:83:ad:
         56:86:82:c7:f6:1b:bf:09:90:94:a7:ad:a7:4a:2c:a0:1e:ac:
         37:59:60:50:db:99:69:4c:34:a1:85:f4:73:69:88:07:22:7e:
         54:da:b9:33:68:e4:cb:99:d1:20:70:67:b4:77:86:32:20:2d:
         c5:97:1d:76:a4:70:3d:57:2d:27:45:85:0b:78:1c:47:57:dd:
         7c:7f:f8:26:49:5c:93:d9:f5:7c:6f:aa:b5:ea:42:9d:1d:7a:
         63:ab:79:2d:c6:c2:bc:3b:b8:5d:40:3f:e7:59:de:7e:1e:ab:
         cf:09:8c:e9:04:7c:40:2c:df:8e:cc:09:00:c9:37:9b:55:44:
         72:4d:da:3a:a9:de:db:59:39:68:84:e6:a9:d2:3f:1f:26:70:
         7c:fb:26:dd:d1:47:26:46:32:a7:ef:8b:f7:f0:05:50:36:c4:
         5e:ed:d2:8a:00:44:c9:e5:bd:39:47:36:bf:1a:02:4a:76:96:
         6c:a4:6c:11:52:4a:54:c9:1a:81:ff:73:a6:5b:ca:b5:2f:f6:
         bf:40:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:03:43 2026 by rpki-client