Error: rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
File:                     DlBAMQCavXWbRZGOm4a_uGpKdo8.mft (raw, json)
Hash identifier:          FfuxzNC7GnapwminMqUdEDhPNMBQvDmAKQG2/5jkXsc=
Subject key identifier:   22:77:6F:2F:4C:77:35:87:8F:B7:50:D9:D2:19:68:AD:DC:7A:E8:AC
Authority key identifier: 0E:50:40:31:00:9A:BD:75:9B:45:91:8E:9B:86:BF:B8:6A:4A:76:8F
Certificate issuer:       /CN=F368FEDBAF/serialNumber=0E504031009ABD759B45918E9B86BFB86A4A768F
Certificate serial:       8C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
Manifest number:          8B
Signing time:             Wed 21 Oct 2026 05:41:03 +0000
Manifest this update:     Wed 21 Oct 2026 05:41:02 +0000
Manifest next update:     Fri 23 Oct 2026 05:41:02 +0000
Files and hashes:         1: DlBAMQCavXWbRZGOm4a_uGpKdo8.crl (hash: Qerg89T94Cnymp3ilAe5ObtiL2nwsWZioka7rjIBqyM=)
                          2: 9D8AB7FCACE211F1871CDECCCE1D38B0.roa (hash: CQAF0fxCnRwHEzs4FiLJeZIqq/WXbB391SNUvsSo8iM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 05:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368FEDBAF, serialNumber=0E504031009ABD759B45918E9B86BFB86A4A768F
        Validity
            Not Before: Oct 21 05:41:02 2026 GMT
            Not After : Oct 23 05:41:02 2026 GMT
        Subject: CN=6ad8506f-d3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:1f:40:5c:5d:43:d4:11:94:a3:c1:8c:0a:
                    c2:41:1e:68:d8:a9:db:6e:c7:33:78:cd:49:18:8e:
                    f3:f7:dd:87:b3:69:9e:c0:0a:98:d8:31:d9:d8:13:
                    2a:37:aa:36:b4:6c:43:98:e0:dd:05:27:a4:68:e5:
                    53:bf:d8:7a:5f:39:1e:c2:86:17:33:fe:3c:72:46:
                    de:6b:d5:4a:5b:4f:f6:c5:7e:06:22:e7:a0:33:da:
                    cc:6e:d1:0f:1f:57:2a:a3:6b:96:fa:a8:df:2b:90:
                    85:c0:56:fc:7c:06:a3:52:d5:50:25:ac:52:d4:fb:
                    ea:e0:1f:07:96:6f:4c:fd:d5:84:0f:e2:aa:0c:88:
                    07:2b:aa:e9:57:cd:df:a1:df:5a:27:aa:a2:f1:97:
                    2c:a6:f3:55:5d:7b:2f:c5:6b:b6:53:f6:5f:7e:88:
                    6d:37:28:ea:fc:0f:ac:26:e2:d4:da:55:2c:14:8f:
                    3e:2c:d7:52:20:a3:7f:8f:f8:7e:28:06:b7:75:cd:
                    f2:35:3e:c5:26:94:b9:41:03:2d:b8:76:d6:08:83:
                    b4:ef:04:95:7a:dc:26:48:98:23:3e:85:52:70:c8:
                    60:9c:a1:dc:e0:71:81:37:0b:53:76:7e:a5:ed:fd:
                    7b:a9:b0:d3:72:2b:be:7f:80:48:3f:f8:0d:72:3c:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:6F:2F:4C:77:35:87:8F:B7:50:D9:D2:19:68:AD:DC:7A:E8:AC
            X509v3 Authority Key Identifier:
                keyid:0E:50:40:31:00:9A:BD:75:9B:45:91:8E:9B:86:BF:B8:6A:4A:76:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ef:d5:39:8b:c2:2b:78:4a:5a:71:d5:a9:6d:4b:9b:5f:f4:
         a3:64:55:7c:2e:37:be:8f:ba:53:2a:b1:84:1f:39:9b:34:ed:
         0a:6f:5b:30:2d:76:2d:91:fe:0c:bd:46:c7:73:89:77:26:7b:
         35:9e:26:7e:de:02:ff:13:b5:4d:6e:3a:b3:5b:04:53:d2:15:
         9d:89:ed:9d:0b:34:38:54:e9:02:75:cb:95:66:53:d8:30:6c:
         3f:9f:1c:bc:94:76:27:e4:85:1f:4f:f4:e9:0a:14:ba:91:dd:
         36:a6:8a:88:9a:a7:f1:c8:5e:9a:52:e6:98:09:3b:fc:54:4f:
         ed:f6:bf:3f:2c:f0:d8:77:e3:e0:87:c5:ef:79:40:6c:0d:d7:
         f7:7d:15:0b:3d:0e:74:bc:fd:f7:23:8d:20:8d:1b:5b:f1:ae:
         fa:77:fa:a4:f6:42:30:91:58:5c:06:8b:f9:05:73:10:0f:1b:
         d5:f7:a9:01:93:2a:e0:d9:da:b2:3c:39:ef:3f:03:f6:7d:d1:
         95:12:41:0a:ff:63:c8:82:78:d3:8c:db:83:ba:40:30:fd:53:
         e2:3b:5f:a0:97:a4:0e:38:53:96:43:20:60:4d:5e:07:3e:3c:
         8a:66:b9:08:83:e8:65:70:d9:98:6e:bd:26:4c:4b:ec:c8:ca:
         be:90:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:03:28 2026 by rpki-client