Error: rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
File:                     DlBAMQCavXWbRZGOm4a_uGpKdo8.mft (raw, json)
Hash identifier:          Qk+oOSz5OOVNCPu3q9OOzJKs1KG0JoKYveQ3LaDh/x4=
Subject key identifier:   20:59:7C:C5:9F:1B:3C:0A:34:7E:73:B7:BA:EB:92:A4:29:E2:15:17
Authority key identifier: 0E:50:40:31:00:9A:BD:75:9B:45:91:8E:9B:86:BF:B8:6A:4A:76:8F
Certificate issuer:       /CN=F368FEDBAF/serialNumber=0E504031009ABD759B45918E9B86BFB86A4A768F
Certificate serial:       6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
Manifest number:          6E
Signing time:             Tue 22 Sep 2026 05:40:00 +0000
Manifest this update:     Tue 22 Sep 2026 05:39:59 +0000
Manifest next update:     Thu 24 Sep 2026 05:39:59 +0000
Files and hashes:         1: DlBAMQCavXWbRZGOm4a_uGpKdo8.crl (hash: ZpzUpnveRYmYIogNSIu2oMEOIY+DDtziVo8ssEzD/Hs=)
                          2: 9D8AB7FCACE211F1871CDECCCE1D38B0.roa (hash: CQAF0fxCnRwHEzs4FiLJeZIqq/WXbB391SNUvsSo8iM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 05:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368FEDBAF, serialNumber=0E504031009ABD759B45918E9B86BFB86A4A768F
        Validity
            Not Before: Sep 22 05:39:59 2026 GMT
            Not After : Sep 24 05:39:59 2026 GMT
        Subject: CN=6ab214b0-b80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:fd:34:93:9e:69:7a:2c:86:5d:6c:4d:ae:
                    f7:2f:3d:33:00:59:cb:d4:ad:21:3b:2e:a3:35:1c:
                    47:c6:cf:3c:c2:9a:19:53:dd:b5:6e:75:ad:bd:60:
                    7a:b4:bf:d1:98:4c:18:8d:c3:0f:4b:86:1c:bd:dc:
                    09:e2:9b:0b:6c:50:f8:e9:5d:74:0f:ee:83:70:1e:
                    5d:1b:6e:59:05:3d:eb:e3:3f:03:f5:97:97:3f:6f:
                    13:9d:e7:7d:b2:3b:cb:0a:b5:8d:22:d5:c0:0c:36:
                    8d:e8:da:6e:12:4d:10:1a:a3:20:0c:67:1e:15:d9:
                    06:e4:8a:27:2b:14:89:f2:2c:67:b4:52:0a:11:ac:
                    b8:a7:b3:12:81:fe:9c:04:a2:f1:e0:1b:95:b0:19:
                    c9:d6:fb:67:e0:f3:24:f0:5b:81:6c:ac:06:97:64:
                    2d:14:0b:b0:b7:98:23:e6:d1:09:9e:26:4d:b7:b0:
                    74:81:b4:e5:10:48:a3:c5:7c:c1:31:1f:65:dd:8e:
                    c2:7b:f3:7e:c1:23:54:a3:e4:16:7f:a9:a6:9a:86:
                    55:56:5a:3c:df:b8:72:41:a5:8a:4a:3e:0a:40:d9:
                    27:fc:2b:1d:9c:81:c4:ca:e0:eb:ef:ca:14:2a:f7:
                    e8:09:17:6e:5f:4a:d8:bb:90:60:7c:1a:19:c9:2b:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:59:7C:C5:9F:1B:3C:0A:34:7E:73:B7:BA:EB:92:A4:29:E2:15:17
            X509v3 Authority Key Identifier:
                keyid:0E:50:40:31:00:9A:BD:75:9B:45:91:8E:9B:86:BF:B8:6A:4A:76:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:52:6c:43:d2:f6:10:8e:86:ab:6c:0a:a7:2b:e5:ba:54:55:
         d1:d5:6c:f8:76:40:0d:69:01:cc:e1:01:03:76:c7:42:fd:2a:
         1c:7f:0e:84:5d:9a:8f:9e:57:68:6c:9b:09:9d:39:90:4e:6b:
         7f:e8:79:d9:42:92:cd:4e:af:31:07:16:96:f1:40:79:02:95:
         6f:c2:5e:09:03:1c:cc:0b:f2:f2:4d:8e:57:c4:2a:f4:e0:5e:
         e6:b3:ef:e3:cb:a6:dc:9f:ac:a4:2f:c1:51:c6:77:41:ea:ff:
         39:71:6b:44:86:b0:24:31:dc:3b:02:bb:12:44:d6:62:28:12:
         a0:e8:d6:ae:02:21:7a:37:a6:cb:c9:8c:df:ac:57:5c:ee:43:
         4e:1f:d7:17:85:c8:d0:90:94:46:94:40:a9:1b:de:1e:c0:e1:
         32:8a:40:56:42:ef:5b:99:44:e0:5d:df:75:d0:d0:16:62:de:
         e4:57:50:c9:79:10:f8:c3:17:8e:a3:5f:10:fe:d9:c5:d5:fd:
         e8:44:5f:67:6e:cb:73:5f:04:9b:66:02:40:e9:a8:0f:19:a8:
         25:e9:9c:b5:87:61:18:69:77:6c:d5:61:21:25:46:a6:99:86:
         1c:3c:de:bb:58:f8:e3:4c:a4:e7:21:90:b6:b4:f1:47:40:0c:
         0b:f3:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:45:46 2026 by rpki-client