Error: rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
File:                     BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json)
Hash identifier:          a4XCaJRXbicFXNX0sEw+UOwkDc2EMbY0Pl6S5cn+biY=
Subject key identifier:   76:F2:42:4B:49:63:2D:C7:04:77:82:0D:93:F4:86:21:53:22:E4:C1
Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Certificate issuer:       /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Certificate serial:       07A6
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
Manifest number:          07A6
Signing time:             Wed 28 Oct 2026 02:17:05 +0000
Manifest this update:     Wed 28 Oct 2026 02:17:04 +0000
Manifest next update:     Fri 30 Oct 2026 02:17:04 +0000
Files and hashes:         1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: u6/pT9Ree06ep3+y4SFLkyOrPA1y6UiMRWqGXlsX13Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                          rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
        Validity
            Not Before: Oct 28 02:17:04 2026 GMT
            Not After : Oct 30 02:17:04 2026 GMT
        Subject: CN=6ae15b20-f884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:46:88:0a:17:58:bc:ad:5a:2b:0b:13:2e:
                    88:b6:5a:4b:7f:34:73:9f:c6:3a:51:bd:f8:87:12:
                    da:c7:ab:cf:26:2e:d9:67:9c:21:7c:b6:17:4d:56:
                    3a:e7:0c:01:47:b6:98:09:5f:2e:95:3f:0f:b6:4c:
                    87:59:19:4a:2c:4a:7e:cc:f5:62:14:af:1c:18:6e:
                    cf:36:ab:9c:5a:fe:37:54:91:1e:cc:45:c6:d4:2a:
                    e2:e8:5a:de:88:2a:80:bf:53:b6:ef:7f:57:60:0c:
                    0e:22:a3:cb:76:4f:c2:d1:7f:e5:d3:1f:c1:c4:85:
                    6f:36:5e:74:84:9f:21:5b:f8:c0:3c:b3:3c:94:6e:
                    a0:9f:60:b8:80:5f:74:59:09:f7:2f:5b:99:12:50:
                    d1:07:6c:00:64:1d:d3:54:64:99:c5:d3:0f:5f:5b:
                    92:66:81:fc:59:08:33:28:c8:9f:c0:71:cd:c0:0d:
                    e4:ef:17:51:6f:71:0f:28:00:ec:e8:7e:4d:a6:0e:
                    6e:d1:49:d3:e4:0f:7d:b9:f9:e4:45:c5:11:c1:0d:
                    9d:e1:88:64:03:e1:16:5e:26:65:48:d0:dc:99:68:
                    66:30:ca:d4:b0:f0:f3:b6:0f:54:8d:49:32:d7:5e:
                    c9:36:92:b7:4a:e5:5c:22:e2:a7:99:03:1d:71:e7:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F2:42:4B:49:63:2D:C7:04:77:82:0D:93:F4:86:21:53:22:E4:C1
            X509v3 Authority Key Identifier:
                keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:d3:c3:aa:63:8c:a9:96:84:06:55:2a:30:25:85:d7:ee:
         0d:82:d2:71:0e:f6:22:2d:66:b6:30:e6:b1:ca:73:84:64:10:
         ac:1e:ef:b5:fc:e1:dc:76:dd:60:a6:f9:5f:18:d1:85:ed:d1:
         2a:f9:4a:fc:4e:d5:0d:d7:a4:be:24:bf:0a:37:24:ce:f5:d3:
         c1:f9:99:6c:a5:4d:99:14:80:f9:88:09:13:c5:79:94:2a:cb:
         1a:f6:60:9d:c4:62:bd:bf:5f:db:a6:1d:db:5d:d8:d3:b9:69:
         f5:0d:58:63:c5:c9:24:a3:51:03:c6:3e:a7:5c:f3:bb:eb:c7:
         5c:b1:38:65:ec:1e:c4:07:51:b0:59:c4:79:cd:f2:94:4d:b0:
         f3:c9:2b:26:37:39:a2:07:df:a6:f6:d5:4f:61:64:3a:46:cf:
         6d:1b:44:5d:53:76:2f:d1:65:45:3b:c6:e0:d8:bd:70:08:83:
         5c:b8:bb:0f:01:c6:cd:3f:fe:98:bf:50:bf:a7:56:b3:62:ef:
         f3:19:83:12:31:61:68:f0:7b:a3:1e:8b:be:2e:ca:2a:03:3c:
         d9:b5:99:94:26:ad:62:ba:95:c9:19:9d:29:86:a3:64:8b:c3:
         99:eb:a1:97:6d:80:39:db:23:3f:04:79:28:a8:66:88:87:57:
         31:dd:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:51:07 2026 by rpki-client