Error: rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          j0p6gy4KVQwl267vBLX97Le4bfic34p3rEu/UXE3aLk=
Subject key identifier:   DD:82:FC:FE:36:40:AB:74:6D:91:4F:17:6A:F0:30:C9:3B:FD:67:45
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       02F4
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          02F2
Signing time:             Sat 05 Sep 2026 04:31:20 +0000
Manifest this update:     Sat 05 Sep 2026 04:31:20 +0000
Manifest next update:     Mon 07 Sep 2026 04:31:20 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: c5Cymh14BYQc2J/+UhEJzhORhsDB9126bK4WAbju8fk=)
                          2: 49D10B8AFB8411F085B74285DAE4EC9C.roa (hash: xN+oPTiqjHmtNSoRYq6a05dMRfGXblz8z65sbXo+yJw=)
                          3: 2E19ACFAFB7811F08E942FB9DAE4EC9C.roa (hash: BxJKHTfkRZri9Zx6qUjCr6DC+VJKH2KXb6afgCKVgm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Sep  5 04:31:20 2026 GMT
            Not After : Sep  7 04:31:20 2026 GMT
        Subject: CN=6a9b9b18-841b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:c5:40:4b:9e:2f:e8:a6:42:b9:d7:74:35:
                    cb:ef:22:c4:67:7e:45:ff:15:c2:e4:7e:bf:16:eb:
                    d5:40:7c:68:9b:1b:69:d7:71:28:93:d6:64:12:a0:
                    f9:3e:31:9d:42:51:3f:e7:71:b9:62:5a:26:02:d2:
                    54:c8:ee:d0:17:6b:d3:b5:0c:e3:67:37:9b:87:5f:
                    c6:3d:4f:62:41:9a:a5:b0:df:21:90:d4:6b:28:f2:
                    d5:8b:7d:da:43:85:1a:06:cb:c3:30:6b:fa:46:04:
                    38:a7:e5:ba:df:2b:91:02:3f:5e:7a:37:eb:96:77:
                    e5:14:6f:9c:f6:bb:3a:47:46:09:99:71:82:ec:cc:
                    0c:e5:75:9c:d6:9b:2a:69:2b:17:6f:3d:6e:a4:37:
                    23:4c:24:da:89:2f:66:02:a4:ec:53:20:7e:f4:2a:
                    57:fa:cd:61:01:99:dc:a4:9a:58:8c:d5:83:cb:db:
                    9a:d7:76:4f:a9:eb:9a:93:6c:d6:d2:d9:a3:88:d1:
                    50:74:d2:25:89:56:05:38:cc:4e:4b:de:0a:cd:82:
                    42:0f:e5:34:4b:ae:dc:06:97:d3:7a:73:51:e6:9a:
                    88:ad:82:83:c7:fe:95:d2:46:61:2a:9b:d5:55:1c:
                    72:39:b8:7d:07:91:9d:f1:af:c3:3d:fb:fc:1e:06:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:82:FC:FE:36:40:AB:74:6D:91:4F:17:6A:F0:30:C9:3B:FD:67:45
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:19:f3:e3:31:fd:5d:92:84:7c:5d:17:af:63:63:0e:ba:3b:
         3a:17:4c:8e:a9:0d:be:4b:ec:17:0f:85:67:75:41:5b:3f:09:
         37:0f:0a:38:4e:87:20:1a:29:44:d0:71:64:6d:72:58:25:aa:
         23:b0:27:21:76:57:a1:8c:50:32:0f:fc:e1:0a:71:1a:e7:92:
         15:2b:45:56:c0:48:9c:1e:b7:ed:e8:2e:f7:d2:e7:46:7c:15:
         47:03:9e:0d:c7:06:ff:32:0e:4a:2c:f7:e2:d3:99:f8:5d:ab:
         a8:51:e6:d7:23:73:95:45:cc:b0:17:60:54:44:a7:cd:37:e5:
         96:3e:06:6f:4c:83:f1:c4:c9:36:3e:15:22:34:56:ec:16:69:
         d8:7e:5d:37:1b:c2:6e:60:bf:60:aa:93:ea:f8:b6:00:77:d1:
         b4:6d:c8:aa:db:fb:53:02:c3:f8:47:c5:7c:04:9d:f5:1d:e6:
         b6:4b:56:6f:46:39:5b:6e:35:6f:9c:73:94:a4:bf:e4:98:24:
         17:b4:bb:2c:03:d4:d1:fc:6e:81:aa:5d:8c:f1:37:43:e3:6a:
         8c:0a:bc:1b:93:eb:8e:74:59:8c:73:c0:c2:f3:db:f4:31:72:
         62:7d:21:a0:d7:01:d2:0a:99:5d:e6:7f:7b:55:52:cf:10:ad:
         e0:c3:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:24:10 2026 by rpki-client