Error: rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
File:                     btXWd58RVP-e4YoO_T3bdQZOoeU.mft (raw, json)
Hash identifier:          S/9B0foFyWaUC+g6tabAmuSxiMbRTviafAZDZmOf5aY=
Subject key identifier:   1E:B0:A8:8A:DA:D8:2A:C1:F5:0E:A0:24:DC:45:AE:48:9F:3E:1C:D3
Authority key identifier: 6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5
Certificate issuer:       /CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
Certificate serial:       0337
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
Manifest number:          0335
Signing time:             Fri 25 Sep 2026 04:18:53 +0000
Manifest this update:     Fri 25 Sep 2026 04:18:53 +0000
Manifest next update:     Sun 27 Sep 2026 04:18:53 +0000
Files and hashes:         1: btXWd58RVP-e4YoO_T3bdQZOoeU.crl (hash: OeF5tmRb8iz3t+EwDRvGaGgJbCNDByTxNSkANTurp+w=)
                          2: 75003F36428711EFA3917E69762E951A.roa (hash: YrqehZ9aTTD1SJptceMXxXj5BazN802PieW8aLLUgFI=)
                          3: B08DAB06428711EF998F6D6D762E951A.roa (hash: wgn3fcAb9qeYaD4t6OvWITLhpGB5UIMeJ/S+H9QW0zg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                          rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1RI, serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
        Validity
            Not Before: Sep 25 04:18:53 2026 GMT
            Not After : Sep 27 04:18:53 2026 GMT
        Subject: CN=6ab5f62d-d776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:14:09:ee:0b:db:71:61:d6:73:3e:52:55:
                    4e:04:58:95:a5:d3:66:f3:4e:cf:e5:b6:dd:6c:86:
                    8d:2c:d5:ff:42:13:79:47:ba:e0:91:ca:6e:df:86:
                    25:01:03:6b:4a:d1:f6:ff:79:a6:21:9e:01:b5:97:
                    72:1f:bc:db:b7:7f:81:b6:30:25:ae:ed:33:d2:02:
                    c7:40:b5:10:7f:d0:ab:35:52:07:40:bc:64:7b:19:
                    48:37:5e:5d:a5:04:69:e6:9d:be:07:59:72:7e:f6:
                    46:84:27:b9:d1:60:c5:53:fa:60:90:25:53:12:84:
                    dc:5c:25:bd:0d:d6:0e:de:00:96:8d:f4:b4:dc:40:
                    a7:ee:09:19:f5:7f:97:f5:57:88:41:11:2e:99:6d:
                    9b:e4:a1:23:05:ff:84:3e:d1:f2:7a:42:c1:c0:83:
                    30:aa:9e:c6:e7:56:c0:63:20:92:c7:bf:28:98:4b:
                    d2:34:da:5e:84:e8:d9:a1:81:80:44:db:ce:9b:ed:
                    04:22:5f:1e:1f:17:88:2e:6b:5a:65:01:99:a7:7a:
                    42:21:ed:f4:6d:ac:fd:ec:58:88:ce:ad:78:3d:ab:
                    1f:38:e6:b2:ba:3c:84:90:1e:5e:a6:1c:7a:db:c5:
                    14:dd:e2:9f:fb:ff:49:30:6b:17:a7:ae:9a:35:63:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B0:A8:8A:DA:D8:2A:C1:F5:0E:A0:24:DC:45:AE:48:9F:3E:1C:D3
            X509v3 Authority Key Identifier:
                keyid:6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b5:bf:7b:79:f4:b2:36:b8:f1:79:8e:c4:01:3c:c3:30:cd:
         66:3a:15:dd:bb:09:8a:9f:ce:a7:05:46:f5:0a:32:e9:f4:7e:
         90:63:fe:1b:c3:e6:65:63:ee:d3:68:60:76:e5:2f:39:1f:0c:
         0c:90:b9:05:25:c3:a0:e8:47:ec:7e:f9:76:7c:c1:ea:06:14:
         7b:f1:9d:f7:74:8d:16:3d:e7:d1:ff:87:61:cc:cc:85:f1:7c:
         e0:39:79:77:2e:20:17:26:43:8c:38:10:33:34:6c:7b:1c:03:
         5b:61:fe:cd:1a:fc:fa:4c:20:6f:31:29:73:b3:87:4c:63:44:
         38:b8:46:da:96:bb:35:95:13:9c:ed:43:73:e7:d3:36:ea:e4:
         00:41:ab:5e:64:18:6a:c9:ab:d4:2a:1c:7e:1b:75:ed:98:8b:
         45:3b:1b:54:36:cc:1d:01:e8:c1:08:01:bd:9f:f8:85:46:b2:
         5c:9b:b2:7a:41:64:da:92:ad:89:ae:7a:43:c3:6b:06:63:17:
         e4:fb:c9:d7:5c:fb:9b:50:07:48:18:61:57:8d:b7:c0:46:ee:
         b3:d9:17:f4:ea:22:64:df:f4:cb:71:ee:d2:ce:2c:08:6b:80:
         87:c6:aa:f3:89:6c:92:ba:96:df:45:2e:dd:c8:5d:2e:43:f8:
         f2:b5:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:11:32 2026 by rpki-client