Error: rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
File:                     JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft (raw, json)
Hash identifier:          3NHc87GpPgbM2Ggajy4eW69+m4RWklA6ikRTKnNk4uw=
Subject key identifier:   05:BB:55:2F:C4:A5:44:A3:B2:C2:A1:54:BD:51:D2:4D:F9:49:1A:C8
Authority key identifier: 24:75:3C:A9:15:E4:EC:2D:2E:CB:98:65:B9:0D:D5:ED:0E:FF:05:62
Certificate issuer:       /CN=F3663E7AAF/serialNumber=24753CA915E4EC2D2ECB9865B90DD5ED0EFF0562
Certificate serial:       07FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
Manifest number:          07FA
Signing time:             Fri 25 Sep 2026 02:06:17 +0000
Manifest this update:     Fri 25 Sep 2026 02:06:16 +0000
Manifest next update:     Sun 27 Sep 2026 02:06:16 +0000
Files and hashes:         1: JHU8qRXk7C0uy5hluQ3V7Q7_BWI.crl (hash: hqVVVIc9IS538o2eW5xa3J8blEoi5PmAzUKIubqpwx8=)
                          2: B39DEA9E9C5F11EB929A9E21F8AEA228.roa (hash: nXH7Fk1rA8ErZqPYeVLGsXae4WxPl+j1t+V+c7REQ+Y=)
                          3: DDEBB6FA9C5F11EBA689FE21F8AEA228.roa (hash: IFf3sogvAtqBt9rn3pz/C/5BQVKudvpgWKkykwRksBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663E7AAF, serialNumber=24753CA915E4EC2D2ECB9865B90DD5ED0EFF0562
        Validity
            Not Before: Sep 25 02:06:16 2026 GMT
            Not After : Sep 27 02:06:16 2026 GMT
        Subject: CN=6ab5d719-d9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:3d:cc:36:fa:74:e4:40:de:a2:30:d5:8c:
                    21:92:fe:d4:4d:e1:b3:5d:dc:d8:bb:29:ff:97:cb:
                    01:e0:44:77:17:9d:be:c9:d5:bd:a6:49:54:91:92:
                    71:9a:5b:2b:e0:a1:aa:15:f1:ec:c3:18:d8:49:f6:
                    3c:95:07:13:45:c7:84:3c:29:6c:8d:92:e8:13:43:
                    c5:e9:68:78:03:40:b3:2e:88:b2:62:8d:9c:ed:ee:
                    a7:c2:a4:de:e2:bf:91:10:ea:50:52:5f:a2:cb:27:
                    ac:08:30:f2:27:4c:71:a6:83:27:17:be:0c:84:66:
                    2c:6f:01:72:d6:cf:5d:98:0e:2f:60:09:eb:fa:00:
                    0d:2d:dc:68:c4:e6:37:cf:ec:86:5c:36:72:75:d0:
                    bc:2c:85:15:09:50:32:ac:12:aa:a9:fd:de:79:5d:
                    e5:ac:a4:b5:69:10:ed:6a:c5:48:80:b6:45:37:17:
                    66:43:83:6b:3f:6f:06:5b:92:8f:64:8e:71:69:6a:
                    90:c5:c2:9e:24:30:ce:a4:68:ff:0b:70:6f:70:ff:
                    2c:5a:76:b4:e1:1a:50:3b:e1:51:a3:e7:16:91:dc:
                    8a:79:b2:29:39:fa:67:bc:c7:51:e3:5a:8b:72:65:
                    35:d7:d0:4b:46:04:71:ac:28:db:97:2b:fb:52:4e:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BB:55:2F:C4:A5:44:A3:B2:C2:A1:54:BD:51:D2:4D:F9:49:1A:C8
            X509v3 Authority Key Identifier:
                keyid:24:75:3C:A9:15:E4:EC:2D:2E:CB:98:65:B9:0D:D5:ED:0E:FF:05:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:01:55:c8:4c:19:89:5e:8c:a9:5d:70:86:cf:90:4e:ee:
         ba:42:c2:22:82:76:45:35:a9:e7:86:d1:48:be:4d:e5:02:f0:
         5f:37:bd:12:d7:07:ed:5d:6e:b6:ca:0a:27:dd:23:ad:5c:f9:
         53:fe:f5:c4:df:ad:19:df:07:bd:13:06:80:4c:ea:87:2e:66:
         b2:4f:31:11:26:e1:a7:df:29:20:1e:21:c9:a9:62:2a:e9:e8:
         25:92:1f:eb:e5:b9:8f:58:d1:02:92:81:b0:fe:36:5f:96:5d:
         2f:c3:c8:19:2c:5e:c9:2e:03:35:ee:25:7b:17:9b:8c:be:7f:
         b4:5e:97:9f:83:a0:bf:94:1f:2b:b0:9e:b7:58:9e:4f:dd:42:
         c3:fb:60:ab:67:08:86:59:be:85:3d:f0:a8:92:77:a2:a4:0b:
         79:31:62:e3:ad:ad:a1:12:e9:e6:7b:c1:25:4d:d3:a3:97:28:
         06:b5:19:de:4a:6b:3f:48:75:56:dd:e8:24:07:7e:9d:93:3a:
         af:62:f1:b4:92:10:7c:cb:fb:d8:aa:80:8a:6a:36:92:aa:8f:
         17:34:b7:2e:a4:0f:f7:00:26:38:8c:a5:33:db:b4:e4:2d:fe:
         44:7c:57:c5:d2:ef:0c:21:ba:36:97:3a:6c:74:25:28:43:05:
         36:22:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:11:31 2026 by rpki-client