Error: rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          ZnhQ7FTvM5fYtT33sun79w7aaRjd5z9Bpd0OhwaS1L0=
Subject key identifier:   8F:F0:A3:4D:DA:93:9E:BF:74:21:20:BE:FF:0D:90:6B:1E:EE:33:90
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       07BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          07BA
Signing time:             Sat 24 Oct 2026 02:15:34 +0000
Manifest this update:     Sat 24 Oct 2026 02:15:34 +0000
Manifest next update:     Mon 26 Oct 2026 02:15:34 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: IIZtRzyhH/37YTA3H6olhAPZFxTGCbKceUoU2ZiN5zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Oct 24 02:15:34 2026 GMT
            Not After : Oct 26 02:15:34 2026 GMT
        Subject: CN=6adc14c6-2527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:6d:be:de:55:15:c1:4e:40:c7:88:81:97:
                    7d:f8:f3:2e:be:18:7d:fe:b1:cc:de:a1:16:03:e4:
                    14:d0:50:07:c5:e2:33:6f:fc:da:b5:73:ec:6b:4d:
                    7c:ab:f6:b6:bc:82:ec:3c:62:4a:2c:01:3f:f5:a9:
                    52:73:ea:bf:46:e7:81:bf:0e:e2:23:4c:93:73:99:
                    ed:ff:73:87:a6:3b:13:3c:ec:be:c8:ee:08:70:d2:
                    6c:af:41:e2:6b:43:86:fd:32:28:78:e8:d2:0b:1a:
                    34:1c:69:d6:11:1b:a2:d3:fe:a9:1b:2d:e4:af:af:
                    03:cd:f5:06:9e:ed:a5:54:67:a7:21:96:37:d5:55:
                    fb:ca:ce:77:30:da:ec:4a:b7:4b:4b:29:2e:3e:fe:
                    5e:de:ed:c1:34:eb:b6:15:e8:d2:b8:40:cd:60:56:
                    f6:59:43:b3:1d:ee:bb:e9:9c:15:ea:f9:e4:9c:b1:
                    29:74:41:cf:94:36:e1:c2:fe:83:dc:93:bb:e6:57:
                    26:0f:4b:f7:c1:08:31:18:be:0c:2e:7a:98:69:1e:
                    66:b3:88:38:c3:ec:4f:4b:ac:37:f5:fc:15:0c:51:
                    4a:76:5b:3b:36:fc:b0:cb:24:8a:a0:09:93:bb:6e:
                    14:5a:e8:82:aa:73:90:71:e6:d6:51:07:3d:cf:61:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F0:A3:4D:DA:93:9E:BF:74:21:20:BE:FF:0D:90:6B:1E:EE:33:90
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:ce:5d:ce:23:5d:32:60:da:a7:47:85:d1:38:4e:cd:cf:
         51:70:f6:6d:04:4a:5f:c1:89:22:a3:b4:cb:f5:d2:24:4f:e0:
         df:e5:13:a7:c5:a1:47:d2:d9:87:d0:4e:d8:41:4a:e2:bf:0f:
         58:65:6f:8c:8c:6f:55:e2:f4:71:a8:48:9a:e8:4b:f3:f8:03:
         2e:e9:9f:ff:eb:4e:d4:d2:06:a6:9a:b7:e9:4b:fb:8b:15:be:
         65:79:cc:35:5d:61:64:b2:c4:ee:0b:73:87:25:29:dd:66:da:
         1e:b4:9c:27:0e:6c:c8:34:44:9f:cb:59:40:04:d5:69:54:4c:
         bc:61:86:3f:a1:e4:fc:c3:8d:c4:9f:aa:ed:82:65:a7:5b:5f:
         09:66:40:63:cb:74:c2:e7:f8:96:48:ea:f4:ba:73:e4:e8:09:
         38:5a:aa:17:ca:14:69:39:77:02:9f:38:ab:b7:3f:5f:34:71:
         d9:87:14:7f:06:54:3b:b2:77:b1:1f:de:10:9c:3f:53:37:64:
         79:60:19:e4:c8:be:ee:79:bb:3a:40:17:5a:21:f7:5b:f5:5e:
         aa:80:06:51:cf:5e:fd:02:f8:e4:0c:23:c0:b8:45:b2:0e:67:
         6d:93:4e:89:90:20:53:a5:a5:aa:c1:c4:a9:96:21:98:11:e7:
         2d:49:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:27:20 2026 by rpki-client