Error: rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
File:                     JbZLdh63yNTuwchu-qN5sDvSAGE.mft (raw, json)
Hash identifier:          J3/yTS4tEJQs6/LoX9pykx4dWFHcaoViQAxyfgb92Ik=
Subject key identifier:   1A:E7:09:18:AC:6A:12:0A:56:AF:D6:B8:95:2F:EB:C1:99:82:83:20
Authority key identifier: 25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
Certificate issuer:       /CN=F369FA36AF/serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Certificate serial:       0AD7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
Manifest number:          0AD7
Signing time:             Mon 26 Oct 2026 01:22:38 +0000
Manifest this update:     Mon 26 Oct 2026 01:22:37 +0000
Manifest next update:     Wed 28 Oct 2026 01:22:37 +0000
Files and hashes:         1: JbZLdh63yNTuwchu-qN5sDvSAGE.crl (hash: 45zRaIUi5TRSgAcGpYSWxp737DB/7HelRq8DAi+tcyU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AF, serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
        Validity
            Not Before: Oct 26 01:22:37 2026 GMT
            Not After : Oct 28 01:22:37 2026 GMT
        Subject: CN=6adeab5e-acff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:12:d2:06:c4:9c:e2:5b:37:f2:bc:f0:3c:
                    6e:39:83:89:47:e7:b5:e0:07:5f:36:d0:c8:35:02:
                    0d:83:91:98:63:24:e0:53:a4:59:96:dd:2f:ca:09:
                    28:06:32:8d:68:28:18:05:1a:fd:73:eb:18:a9:67:
                    f2:7c:f8:af:13:99:3a:b3:49:12:b1:f1:df:a6:e7:
                    7b:73:01:4f:db:0a:b7:84:13:30:e1:a2:61:9a:b0:
                    7d:5a:da:32:78:2f:b6:0e:96:67:a1:30:37:aa:7c:
                    99:e9:d7:5e:d9:e9:f4:93:7e:d5:19:1b:48:6c:7f:
                    9c:e8:64:09:16:12:d5:d4:6e:1d:57:71:85:d4:e6:
                    69:54:0c:82:9c:e5:fc:29:e0:d8:49:ca:5b:31:a7:
                    2c:b2:6a:41:5d:de:52:52:98:8b:b1:d4:48:46:48:
                    b1:58:78:3d:cb:ef:06:1c:09:7e:ea:1f:5d:e7:bc:
                    d1:2a:9c:62:dd:17:1b:7e:bd:8e:26:c6:21:3f:ea:
                    e2:ae:f2:3b:97:75:21:a9:77:e1:93:68:0c:2e:c4:
                    10:7b:67:5d:ae:e6:85:f2:59:32:63:e2:d3:e3:9d:
                    68:b4:30:31:81:11:fd:d4:eb:03:b7:e5:7b:8e:e6:
                    fd:37:a6:74:bc:a2:b6:b9:7e:2c:12:39:4e:eb:92:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:09:18:AC:6A:12:0A:56:AF:D6:B8:95:2F:EB:C1:99:82:83:20
            X509v3 Authority Key Identifier:
                keyid:25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:d0:10:2f:55:43:a8:e6:a8:35:59:f9:10:9b:9a:19:0c:
         e0:56:3b:c9:6b:10:1d:61:7a:80:91:43:28:ff:09:29:df:f4:
         1d:1f:05:ee:1c:c1:d0:42:f8:74:b8:6d:d3:aa:e0:0c:48:ee:
         46:c5:35:c6:ce:e1:43:af:07:e8:e0:72:56:8c:dd:51:01:50:
         53:fb:57:6c:79:d3:2b:32:b0:8c:d2:8f:4a:2f:8b:c3:c7:5a:
         63:78:e1:06:43:7d:1d:90:7d:50:2e:26:00:3d:0c:c3:9f:b5:
         92:f4:c1:ef:35:9d:16:80:78:2c:bf:d6:2e:c0:13:24:38:dc:
         a9:0e:16:04:13:68:2c:39:12:ab:89:a1:2c:75:79:2b:73:0e:
         c3:6a:8d:0c:bc:53:e8:e7:79:ad:ea:42:a7:2a:5b:38:6c:7c:
         d0:65:82:a0:64:00:08:60:0f:1f:35:c9:5e:04:66:ec:12:97:
         74:23:c6:36:fb:00:38:f1:ae:b6:b6:87:9f:48:ca:c3:0c:d1:
         6a:77:ea:8e:c2:7e:9f:78:75:0f:43:ba:05:53:2b:26:da:0d:
         19:28:54:cc:95:5b:b8:d7:54:20:c0:c2:77:04:72:47:e9:d3:
         e7:08:2b:93:d3:54:46:6d:b4:7b:c7:8f:e0:83:db:12:ae:29:
         d1:11:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:44:59 2026 by rpki-client