Error: rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.mft (raw, json)
Hash identifier:          fr09Jw9Tu/EgpFyoySZi7CjedbnTPX2b8mULv4DCUA0=
Subject key identifier:   CD:69:F2:62:3C:C7:77:FB:FD:62:36:79:E0:E2:E8:CB:D3:02:74:D3
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Certificate issuer:       /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial:       076A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
Manifest number:          0769
Signing time:             Wed 28 Oct 2026 02:25:42 +0000
Manifest this update:     Wed 28 Oct 2026 02:25:41 +0000
Manifest next update:     Fri 30 Oct 2026 02:25:41 +0000
Files and hashes:         1: 48LJS_VpO0HwWh1WV9GnhLXVcmE.crl (hash: 6d0g/QQRf2oFlQABLULARG3IGCITt+SkdvOwIoLJY/Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                          rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5RI, serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
        Validity
            Not Before: Oct 28 02:25:41 2026 GMT
            Not After : Oct 30 02:25:41 2026 GMT
        Subject: CN=6ae15d26-df34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:39:8a:2e:a7:1b:27:41:1a:79:dc:27:7a:
                    fd:f0:94:6e:c4:f3:bd:bb:7c:83:c3:88:f0:bb:bb:
                    22:77:e3:8e:80:34:4c:9c:c5:94:c7:5b:f5:da:47:
                    d2:35:24:c5:36:36:3a:f7:f7:a6:fb:ce:cf:4a:2e:
                    0c:e5:34:b3:ed:0c:bc:f0:e2:1b:a9:40:8f:b3:50:
                    0c:f2:2c:0a:79:f8:51:5f:a9:a5:9c:b4:39:23:9b:
                    35:59:c1:54:7f:07:c8:cf:44:9a:d7:ba:9d:a5:ad:
                    ba:5e:19:81:39:e2:7a:d8:d3:63:d0:d9:e8:2a:8d:
                    6b:c8:b3:d6:8a:2d:c7:20:95:df:96:ae:f9:47:8f:
                    98:ee:27:47:64:83:5f:62:6e:5e:c2:3a:23:9b:97:
                    41:57:13:83:14:52:ba:63:2b:30:c6:47:25:94:03:
                    57:ad:dd:3f:2f:1b:87:1c:0f:67:32:f1:d0:2d:32:
                    fb:a5:09:82:10:e1:cb:e0:e5:df:ab:d9:b8:cb:3d:
                    83:57:23:5c:f1:55:25:c4:fd:ea:25:71:56:b7:80:
                    8a:87:46:5f:04:35:d8:e1:ed:29:8f:d8:e5:43:43:
                    be:bd:33:9e:fd:c9:a0:d9:09:7e:4d:d4:c4:0d:9d:
                    b1:f2:95:61:77:eb:63:8e:5d:b5:39:a9:83:4c:43:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:F2:62:3C:C7:77:FB:FD:62:36:79:E0:E2:E8:CB:D3:02:74:D3
            X509v3 Authority Key Identifier:
                keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:2b:c3:40:93:54:38:74:9e:b4:ee:f2:cf:d2:b0:84:43:
         39:9b:64:65:67:b8:b1:3c:9f:b2:d0:24:8f:0e:d2:bc:01:8c:
         47:60:cf:d8:97:5d:4c:2f:c3:71:a8:33:07:98:5f:0e:0f:78:
         98:bf:ba:a2:59:b1:fb:21:8e:eb:43:3d:f8:47:33:43:5a:c4:
         8c:3f:e7:2e:ac:b1:0c:52:8d:6c:95:01:89:d7:5e:e4:89:0d:
         16:9c:c3:c6:97:14:ea:62:d5:b4:6f:87:88:fe:60:42:aa:7c:
         3d:b9:d1:57:c7:84:1b:4a:93:5a:52:5f:41:9c:a4:53:e1:6a:
         61:69:69:55:14:0a:87:49:2c:b1:76:1d:66:3b:63:19:63:b1:
         02:08:ec:42:93:d6:09:97:c1:96:00:9f:2e:54:52:46:97:1e:
         de:37:20:1b:21:7f:47:8e:51:c2:b5:46:11:5a:70:48:a7:81:
         30:37:74:88:b8:f5:54:8e:67:ae:f6:d5:39:cf:7b:70:ef:96:
         16:bb:af:48:de:7c:bd:c6:a5:33:17:f1:a0:b3:4f:ac:da:df:
         26:43:b4:3e:d4:78:dc:9b:7c:8e:3d:d2:e1:f2:fb:98:c5:33:
         f5:c5:79:a3:e5:2c:7f:94:15:3e:1e:2f:f4:62:b7:96:cf:2b:
         41:f3:0f:8a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB2owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDQzVSSTExMC8GA1UEBRMoRTNDMkM5NEJGNTY5M0I0MUYwNUExRDU2NTdEMUE3
ODRCNUQ1NzI2MTAeFw0yNjEwMjgwMjI1NDFaFw0yNjEwMzAwMjI1NDFaMBgxFjAU
BgNVBAMTDTZhZTE1ZDI2LWRmMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhyDmKLqcbJ0Eaedwnev3wlG7E8727fIPDiPC7uyJ3446ANEycxZTHW/Xa
R9I1JMU2Njr396b7zs9KLgzlNLPtDLzw4hupQI+zUAzyLAp5+FFfqaWctDkjmzVZ
wVR/B8jPRJrXup2lrbpeGYE54nrY02PQ2egqjWvIs9aKLccgld+WrvlHj5juJ0dk
g19ibl7COiObl0FXE4MUUrpjKzDGRyWUA1et3T8vG4ccD2cy8dAtMvulCYIQ4cvg
5d+r2bjLPYNXI1zxVSXE/eolcVa3gIqHRl8ENdjh7SmP2OVDQ769M579yaDZCX5N
1MQNnbHylWF362OOXbU5qYNMQ8CRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzWny
YjzHd/v9YjZ54OLoy9MCdNMwHwYDVR0jBBgwFoAU48LJS/VpO0HwWh1WV9GnhLXV
cmEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1Q0M1L0Y1QTgxRDQyMjExQjExRUNCQzUwRTIyQkQ4QTAxNENFLzQ4TEpT
X1ZwTzBId1doMVdWOUduaExYVmNtRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzQ4TEpTX1ZwTzBId1doMVdWOUduaExYVmNtRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTVDQzUvRjVBODFENDIyMTFCMTFFQ0JDNTBFMjJCRDhBMDE0
Q0UvNDhMSlNfVnBPMEh3V2gxV1Y5R25oTFhWY21FLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCx6CvDQJNUOHSetO7yz9KwhEM5m2RlZ7ix
PJ+y0CSPDtK8AYxHYM/Yl11ML8NxqDMHmF8OD3iYv7qiWbH7IY7rQz34RzNDWsSM
P+curLEMUo1slQGJ117kiQ0WnMPGlxTqYtW0b4eI/mBCqnw9udFXx4QbSpNaUl9B
nKRT4WphaWlVFAqHSSyxdh1mO2MZY7ECCOxCk9YJl8GWAJ8uVFJGlx7eNyAbIX9H
jlHCtUYRWnBIp4EwN3SIuPVUjmeu9tU5z3tw75YWu69I3ny9xqUzF/Ggs0+s2t8m
Q7Q+1Hjcm3yOPdLh8vuYxTP1xXmj5Sx/lBU+Hi/0YreWzytB8w+K
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:58 2026 by rpki-client