Error: rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
File:                     btXWd58RVP-e4YoO_T3bdQZOoeU.mft (raw, json)
Hash identifier:          Jz7T7rFNVAJ/t1OXoG94sDHT8ygWBbp3HWZCE+bEAZ0=
Subject key identifier:   B8:3D:FD:7B:06:2F:3B:6B:A4:F3:C4:C0:6C:52:2C:39:E8:DA:26:EF
Authority key identifier: 6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5
Certificate issuer:       /CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
Certificate serial:       0322
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
Manifest number:          0320
Signing time:             Fri 04 Sep 2026 04:24:33 +0000
Manifest this update:     Fri 04 Sep 2026 04:24:32 +0000
Manifest next update:     Sun 06 Sep 2026 04:24:32 +0000
Files and hashes:         1: btXWd58RVP-e4YoO_T3bdQZOoeU.crl (hash: spZLZbQYzyAT0JvpIDC3gbukkV0NTApCE6QaBJ1MZd8=)
                          2: 75003F36428711EFA3917E69762E951A.roa (hash: YrqehZ9aTTD1SJptceMXxXj5BazN802PieW8aLLUgFI=)
                          3: B08DAB06428711EF998F6D6D762E951A.roa (hash: wgn3fcAb9qeYaD4t6OvWITLhpGB5UIMeJ/S+H9QW0zg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                          rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1RI, serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
        Validity
            Not Before: Sep  4 04:24:32 2026 GMT
            Not After : Sep  6 04:24:32 2026 GMT
        Subject: CN=6a9a4801-7856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:c0:24:a3:9b:b4:10:05:42:f4:46:ff:5d:
                    7e:0a:95:02:0b:5e:5c:c4:d5:e9:e6:82:36:2c:8f:
                    ef:f6:83:f5:a3:10:c3:92:50:89:a8:44:eb:a3:f1:
                    92:95:87:7b:47:1e:f4:c4:30:e0:6b:06:8b:20:16:
                    8f:fa:db:4b:68:81:22:ea:38:22:d0:67:6b:95:46:
                    b6:51:6f:6f:d2:36:cb:41:e6:da:50:46:6e:8a:47:
                    01:db:b2:96:2f:22:dc:99:44:e8:39:49:d5:a3:42:
                    1f:23:be:09:cb:5a:b7:c9:e4:57:a3:7f:48:58:9c:
                    e1:6d:08:cf:36:d3:96:61:d3:cd:79:f0:b6:f2:2f:
                    8a:7f:ed:1b:e7:a4:42:00:d2:77:97:04:aa:0b:38:
                    3a:f0:fc:9f:7a:0c:d1:0c:36:6d:23:c4:4f:43:b1:
                    d9:7d:2e:91:14:55:d4:28:20:1d:bd:74:75:a3:c8:
                    b7:f4:79:8f:ed:64:45:16:87:90:d4:6b:40:6d:6a:
                    4c:3b:c0:43:a7:0b:c9:a0:39:67:fa:d6:e9:08:2e:
                    67:d1:6e:bc:c5:0d:57:6f:e8:dd:dc:23:ba:41:8e:
                    94:4b:c9:bc:0f:04:3b:49:14:ef:00:0d:6e:45:21:
                    84:51:4d:70:97:52:09:34:c3:38:08:2e:92:73:c7:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:FD:7B:06:2F:3B:6B:A4:F3:C4:C0:6C:52:2C:39:E8:DA:26:EF
            X509v3 Authority Key Identifier:
                keyid:6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:67:df:3d:e5:0b:19:33:c4:38:cf:18:1a:b3:12:0d:3b:e5:
         a1:8a:2d:93:a5:d5:55:c9:d6:f1:66:2b:5d:af:e1:c5:75:9d:
         b6:47:2e:26:d8:e8:8f:4c:f1:01:41:fa:06:1b:95:21:9f:ee:
         99:df:e4:f2:50:8d:4f:71:2f:3e:7b:19:46:95:f9:dc:97:8a:
         80:a6:75:31:21:b9:b3:7d:df:a7:54:07:e3:c7:5b:95:bf:4e:
         7e:c5:3d:ef:0a:fe:13:b8:b9:fb:d2:d3:04:72:ed:1c:1c:dd:
         b9:ae:8b:5b:91:66:4e:bb:12:7c:0c:fe:84:62:50:9f:89:6f:
         a8:f5:ef:b7:0b:48:79:d1:a7:95:ff:1c:a9:96:74:b4:68:ee:
         ee:53:cf:4e:44:3c:1d:4f:06:70:4b:13:e5:dd:c2:a3:c8:25:
         41:ea:00:65:e3:1f:a2:1b:61:3c:f4:fa:3c:bc:2d:f4:94:c2:
         38:86:21:74:f6:04:c2:2e:d7:42:70:87:de:b8:89:57:a7:f5:
         e4:da:21:9b:87:a1:7a:47:29:04:2d:7e:4b:13:50:8f:f8:82:
         a6:bc:85:d4:e2:ab:a5:e0:93:77:66:e2:19:fd:d1:73:20:f9:
         56:c8:c7:01:85:1a:55:0a:85:66:22:12:90:e0:9d:83:35:9d:
         c7:61:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:33 2026 by rpki-client