Error: rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          I293BTcZ0OKYDpkDIul/lqEjWDBX4CG2hkMOUyx55LY=
Subject key identifier:   AF:C2:6F:5D:05:3F:44:72:1A:3E:14:2F:F2:56:65:D7:C2:2A:1C:92
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       06AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          06AC
Signing time:             Sun 25 Oct 2026 02:40:09 +0000
Manifest this update:     Sun 25 Oct 2026 02:40:08 +0000
Manifest next update:     Tue 27 Oct 2026 02:40:08 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: CS3KxBZbf3zwXgWPBsrQJPwSdsNSMwwi0F83yQQaHUs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Oct 25 02:40:08 2026 GMT
            Not After : Oct 27 02:40:08 2026 GMT
        Subject: CN=6add6c09-8925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:31:21:f0:86:30:08:73:0f:be:47:24:4f:
                    dc:37:59:c7:cf:f0:26:46:a0:70:39:ec:1c:a8:20:
                    d0:11:aa:b0:47:ed:d9:df:ef:be:e2:5a:f3:3f:40:
                    72:b6:92:c6:64:7b:9d:01:c2:e8:98:69:a8:db:8d:
                    61:41:ef:ee:18:c2:ff:e8:6d:d7:36:d4:22:b7:f8:
                    63:83:2f:02:81:ec:18:b2:e8:59:87:0f:8c:24:f9:
                    2c:5f:9b:70:b1:65:03:d7:97:70:c1:85:95:af:24:
                    30:42:a1:c8:75:94:8f:f7:ce:ff:28:e2:18:dd:2a:
                    92:c9:03:8b:7b:01:c9:c1:5a:94:97:a9:36:02:14:
                    08:61:fa:29:17:6c:49:ad:49:f7:c8:fd:f9:59:2a:
                    7f:6c:a7:64:d1:32:b3:3c:13:fc:0d:7b:35:15:a4:
                    f7:e3:03:02:5a:99:90:7a:31:4d:60:5f:72:97:90:
                    b5:22:10:60:20:9e:d8:64:53:8c:94:f0:79:4e:8b:
                    c1:a5:da:34:df:f5:55:06:5e:30:11:d7:2e:80:3c:
                    e7:e2:a9:37:96:c0:d4:c9:8e:a1:7f:ce:48:a1:90:
                    b2:08:d9:5e:d8:16:60:37:9e:ed:4a:45:c2:3d:32:
                    62:05:3f:12:9b:63:9e:d5:80:56:e7:4a:c6:d3:15:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:6F:5D:05:3F:44:72:1A:3E:14:2F:F2:56:65:D7:C2:2A:1C:92
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:67:a2:51:cd:09:57:fd:b0:8d:e4:65:df:a7:ab:45:69:e7:
         47:4f:c4:4f:91:78:26:49:3c:a0:94:09:28:c2:a3:8a:01:16:
         1c:29:59:4d:a1:5a:fe:48:d6:ed:90:97:ad:7c:4f:c1:6c:d6:
         ef:d5:f0:6b:25:ba:ef:0e:ff:aa:61:0d:ad:41:ce:de:a8:0b:
         fd:cd:89:76:fc:66:5f:d0:3e:29:cb:3a:3a:81:ca:dc:3d:60:
         65:8b:07:ca:52:d6:10:3d:e2:fd:c1:fc:ad:61:bb:9a:5b:42:
         4e:e6:67:18:ae:6e:15:aa:37:e4:d4:c3:39:c4:09:c8:bc:48:
         da:6f:84:4d:03:b8:ae:17:c2:e3:8a:16:94:8b:25:a0:65:fb:
         12:3c:75:ff:67:0c:cf:1b:16:19:af:2d:00:f9:a4:8e:10:15:
         49:c8:a7:c7:13:d2:2d:5c:b2:38:7a:63:a4:05:d6:91:e0:86:
         17:e7:06:13:34:4e:71:6c:ab:d0:67:0d:57:33:54:97:a7:38:
         25:de:78:a7:6d:de:6f:85:62:f6:01:61:e0:89:4b:45:e7:e3:
         4c:e9:68:e6:bb:78:ea:c6:ed:77:f4:7f:c0:84:c0:4e:2e:43:
         20:83:a3:02:b0:97:6b:0b:e4:2a:bc:a3:56:bc:bf:74:a6:e7:
         74:3c:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:59:40 2026 by rpki-client