Error: rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
File:                     5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft (raw, json)
Hash identifier:          rEs5NAsViYJR3MVBbZEWkxp8toBCdqaz/rnQ1INZ3Ow=
Subject key identifier:   82:C1:D6:98:93:06:6F:A6:45:26:0E:2E:0C:7C:8D:FB:CE:49:4C:72
Authority key identifier: E6:35:24:6F:EB:F7:07:53:2E:DA:D2:02:1A:FC:87:48:C1:71:16:AF
Certificate issuer:       /CN=F362AF0DRI/serialNumber=E635246FEBF707532EDAD2021AFC8748C17116AF
Certificate serial:       01D9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
Manifest number:          01D3
Signing time:             Tue 27 Oct 2026 05:02:16 +0000
Manifest this update:     Tue 27 Oct 2026 05:02:15 +0000
Manifest next update:     Thu 29 Oct 2026 05:02:15 +0000
Files and hashes:         1: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.crl (hash: f7dwHtuost0O/1/9hyPdxOfEmdd29o6yQ9ElOSGPjxw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
                          rsync://rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF0DRI, serialNumber=E635246FEBF707532EDAD2021AFC8748C17116AF
        Validity
            Not Before: Oct 27 05:02:15 2026 GMT
            Not After : Oct 29 05:02:15 2026 GMT
        Subject: CN=6ae03058-e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:81:e1:5e:fd:47:2e:74:6d:6e:21:12:6b:
                    97:a7:47:d5:1a:1c:e0:7b:f4:91:82:5e:46:33:2f:
                    4b:8f:f0:67:e0:21:7e:a5:6a:9d:68:1b:b7:41:8b:
                    a5:d7:de:12:e9:0f:1b:8a:18:73:6d:56:fc:3a:e7:
                    56:88:9c:9c:44:b2:a5:a9:44:49:50:3e:60:5b:ad:
                    aa:e5:16:e4:c1:98:eb:22:76:e8:c3:61:dd:ac:0c:
                    61:0c:19:d1:65:f9:40:7e:ee:70:2d:48:2b:04:3c:
                    94:9e:39:84:2e:f5:58:d4:f8:99:51:a1:6e:2c:95:
                    68:04:91:b3:af:18:55:9a:65:30:59:64:a3:8c:0f:
                    f2:de:db:1a:d0:72:f7:af:ec:30:bc:1d:bf:3f:e1:
                    18:27:ce:86:53:4e:35:33:ec:e8:d0:14:48:58:50:
                    5d:a2:32:5f:59:bd:67:ae:8f:82:28:2d:fa:3b:09:
                    1e:b8:34:21:b5:2a:00:93:fe:71:36:5a:45:bb:a6:
                    06:0c:f4:a3:9a:b6:91:6e:c0:fd:ce:5b:0a:52:20:
                    72:e7:c2:de:c1:bc:1e:40:bf:09:98:41:ee:3c:04:
                    2a:26:20:50:43:b1:0e:f5:b4:28:93:5e:1e:7e:fd:
                    32:d8:27:c5:ad:e4:b7:6e:02:e2:f1:78:30:e8:7f:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:D6:98:93:06:6F:A6:45:26:0E:2E:0C:7C:8D:FB:CE:49:4C:72
            X509v3 Authority Key Identifier:
                keyid:E6:35:24:6F:EB:F7:07:53:2E:DA:D2:02:1A:FC:87:48:C1:71:16:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:9b:48:07:9a:ea:91:2f:53:a1:a9:10:0c:2f:e5:18:2d:
         d7:31:ec:41:60:d8:47:a6:8f:1c:7a:45:7f:41:f1:1c:9e:07:
         d6:f4:5f:6e:fe:c9:00:89:74:42:a1:76:43:70:5b:60:cc:36:
         fe:a2:d4:6d:55:cb:b0:5c:ea:d7:78:41:35:a2:60:94:03:ab:
         17:18:8d:06:f0:db:fc:43:02:66:ff:c1:82:3a:87:a9:0e:08:
         16:33:6b:5a:12:4b:ea:30:eb:75:07:4d:a1:57:9c:bf:53:d1:
         3d:72:a6:50:06:35:b8:c5:53:3b:53:20:c4:9d:7b:6c:26:f6:
         c8:b7:aa:04:2f:f9:d9:5c:8e:6d:b2:3b:d9:d5:5f:f4:7f:5c:
         b2:dc:90:25:0f:24:63:98:e0:83:a1:74:08:2d:65:e8:ba:8f:
         2e:48:df:9a:15:55:62:ad:94:b4:d0:66:6e:a6:aa:c6:de:d0:
         54:dd:ec:a7:6b:ef:a4:1e:a5:2d:f8:52:61:e5:bc:49:43:31:
         e9:5e:14:98:f4:b4:fb:16:b1:63:2e:21:38:6c:8f:d3:4f:14:
         4e:68:49:f6:26:52:81:6c:06:6d:47:c5:d9:d2:6c:4a:72:52:
         0d:21:df:0b:72:40:79:ad:27:bf:51:f0:3c:ce:2c:57:7d:a0:
         cc:b9:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:02:42 2026 by rpki-client