Error: rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File:                     BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier:          tbTQIdZXvry0F7nn/DthOzZ0uOUw7q7f88xY1fgPmbo=
Subject key identifier:   F8:14:19:BC:CF:F6:B1:0B:4A:7B:5E:10:C1:C5:53:C4:D2:9E:59:B1
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer:       /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial:       04B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number:          04AE
Signing time:             Thu 10 Sep 2026 03:32:52 +0000
Manifest this update:     Thu 10 Sep 2026 03:32:52 +0000
Manifest next update:     Sat 12 Sep 2026 03:32:52 +0000
Files and hashes:         1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: GVZxYrVHrwvOTyjf9q2Qwb8nwYPU5/9pbOIzkVQLGUI=)
                          2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
                          3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
                          4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367676CAF, serialNumber=0601535601327F433F8D8427204C50942084AD56
        Validity
            Not Before: Sep 10 03:32:52 2026 GMT
            Not After : Sep 12 03:32:52 2026 GMT
        Subject: CN=6aa224e4-4ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:94:60:cc:71:b8:19:69:8f:d2:9f:bf:81:
                    cc:79:85:e9:b2:c5:c1:ca:e3:c7:73:7f:8d:68:c8:
                    7e:5f:1f:a2:01:d3:23:f4:1a:84:51:c9:78:00:9b:
                    5e:06:73:c8:a0:36:e2:4b:e6:9f:27:e0:28:85:bf:
                    ed:77:fa:97:65:d8:2e:6f:28:c8:74:9c:c1:a3:b3:
                    6b:58:9d:8e:60:8d:69:b8:71:30:82:62:0a:cd:11:
                    93:75:14:77:11:87:f6:e2:26:15:6d:38:d4:40:84:
                    a6:77:d6:ff:1b:f4:3a:92:df:6e:b8:c9:26:d5:4f:
                    46:57:3f:4e:dc:d5:41:ee:00:d0:5b:fb:b0:1f:32:
                    37:19:8c:f5:12:05:7c:23:70:73:b6:da:5c:18:74:
                    45:03:c0:d6:21:7c:33:de:0f:10:75:93:c2:af:85:
                    46:b2:23:c2:79:9c:e2:33:7f:b2:97:6b:16:27:f4:
                    4d:a4:96:f1:71:58:95:a2:dc:2d:fb:b6:3c:e8:d4:
                    48:47:76:59:c2:a5:d1:aa:fe:11:f5:e8:70:da:72:
                    6e:39:35:7f:49:b8:40:c0:87:63:45:10:fe:c3:28:
                    03:40:be:be:12:a5:3b:a7:a0:4b:e4:ff:43:c7:31:
                    08:2b:29:f7:b1:9d:53:85:c3:2f:95:80:66:cd:06:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:19:BC:CF:F6:B1:0B:4A:7B:5E:10:C1:C5:53:C4:D2:9E:59:B1
            X509v3 Authority Key Identifier:
                keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:8b:56:64:96:cd:a5:60:bf:fb:d2:b3:23:69:d2:3d:1f:
         d0:ae:19:e7:f8:cf:82:87:ef:a0:0f:3c:d7:77:82:de:5b:cb:
         4f:2a:d0:f5:ec:90:52:27:25:9a:ed:7e:2b:f6:da:a2:13:09:
         ee:4b:6b:f5:5b:3c:91:c1:ee:7c:e2:a8:74:82:e3:e3:60:6b:
         a5:ad:14:23:8e:0d:11:41:b7:6f:cb:37:dc:26:1b:ca:da:b8:
         7f:6e:69:00:88:e0:44:dd:38:5d:e4:c3:32:db:ac:0c:57:a0:
         3d:79:8c:3b:f8:76:69:01:58:53:3c:2a:88:5f:3b:76:5f:f6:
         b6:cc:25:32:4c:76:a8:cc:6f:9c:15:09:8d:1d:e1:09:4e:1b:
         4d:16:ca:5f:bf:cb:7c:f8:3c:e4:69:d7:b6:73:f0:c5:0e:d6:
         13:a7:ab:db:68:74:60:14:1b:fe:fe:09:7b:fc:91:c7:5e:79:
         c4:f6:9d:6d:78:a2:f0:80:6b:3d:c6:67:e3:6c:34:00:c0:4e:
         aa:d0:fd:a3:ce:d2:6f:51:b9:a1:48:8f:d3:e7:c4:3d:78:06:
         1b:de:ea:df:ce:8b:f5:51:fe:23:aa:62:ef:81:90:6d:d9:df:
         b0:7a:56:1f:52:f6:38:93:54:47:a0:4f:4e:7a:13:86:26:d8:
         4e:ef:08:20
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzY3NkNBRjExMC8GA1UEBRMoMDYwMTUzNTYwMTMyN0Y0MzNGOEQ4NDI3MjA0QzUw
OTQyMDg0QUQ1NjAeFw0yNjA5MTAwMzMyNTJaFw0yNjA5MTIwMzMyNTJaMBgxFjAU
BgNVBAMTDTZhYTIyNGU0LTRjZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6X5RgzHG4GWmP0p+/gcx5hemyxcHK48dzf41oyH5fH6IB0yP0GoRRyXgA
m14Gc8igNuJL5p8n4CiFv+13+pdl2C5vKMh0nMGjs2tYnY5gjWm4cTCCYgrNEZN1
FHcRh/biJhVtONRAhKZ31v8b9DqS3264ySbVT0ZXP07c1UHuANBb+7AfMjcZjPUS
BXwjcHO22lwYdEUDwNYhfDPeDxB1k8KvhUayI8J5nOIzf7KXaxYn9E2klvFxWJWi
3C37tjzo1EhHdlnCpdGq/hH16HDacm45NX9JuEDAh2NFEP7DKANAvr4SpTunoEvk
/0PHMQgrKfexnVOFwy+VgGbNBivzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+BQZ
vM/2sQtKe14QwcVTxNKeWbEwHwYDVR0jBBgwFoAUBgFTVgEyf0M/jYQnIExQlCCE
rVYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2NzZDLzMxOEMxRTkwMUE2MTExRUU4M0UxRDM4MTRBRDlFNkZDL0JnRlRW
Z0V5ZjBNX2pZUW5JRXhRbENDRXJWWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JnRlRWZ0V5ZjBNX2pZUW5JRXhRbENDRXJWWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzY3NkMvMzE4QzFFOTAxQTYxMTFFRTgzRTFEMzgxNEFE
OUU2RkMvQmdGVFZnRXlmME1fallRbklFeFFsQ0NFclZZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+wItWZJbNpWC/+9KzI2nSPR/Qrhnn
+M+Ch++gDzzXd4LeW8tPKtD17JBSJyWa7X4r9tqiEwnuS2v1WzyRwe584qh0guPj
YGulrRQjjg0RQbdvyzfcJhvK2rh/bmkAiOBE3Thd5MMy26wMV6A9eYw7+HZpAVhT
PCqIXzt2X/a2zCUyTHaozG+cFQmNHeEJThtNFspfv8t8+Dzkade2c/DFDtYTp6vb
aHRgFBv+/gl7/JHHXnnE9p1teKLwgGs9xmfjbDQAwE6q0P2jztJvUbmhSI/T58Q9
eAYb3urfzov1Uf4jqmLvgZBt2d+welYfUvY4k1RHoE9OehOGJthO7wgg
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:17 2026 by rpki-client