Error: rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          4jdK1A+OxbHLInlMGurCMcbzKuFqNBnqeJKooRtPUrw=
Subject key identifier:   30:14:BB:D3:47:2C:F8:3A:7B:7F:E9:9C:45:04:8A:1F:83:3A:77:29
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       0888
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          0887
Signing time:             Sat 24 Oct 2026 01:58:14 +0000
Manifest this update:     Sat 24 Oct 2026 01:58:13 +0000
Manifest next update:     Mon 26 Oct 2026 01:58:13 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: ewOz+fI6d05uxficO+GbmT60XuTVUeKFWAm2toms/vE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 01:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Oct 24 01:58:13 2026 GMT
            Not After : Oct 26 01:58:13 2026 GMT
        Subject: CN=6adc10b6-23af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:4c:5f:3a:02:0c:2f:54:ee:0a:56:6b:9c:
                    13:28:42:bc:26:8e:e2:ee:ca:31:f2:b7:e0:0b:4d:
                    af:cc:a8:a4:ef:a0:13:3f:0e:ed:6f:60:68:dc:33:
                    91:e8:46:c1:e0:f5:1e:fe:44:65:63:f8:7b:d8:36:
                    ba:5d:39:82:a3:12:15:b4:cb:7b:3c:3b:6f:cd:ee:
                    ad:84:c2:65:11:51:e7:4f:8a:16:96:94:c8:3f:8e:
                    bb:11:08:23:cb:f6:c9:73:f5:8c:02:8a:8f:79:a9:
                    80:c8:00:24:f9:09:41:c9:e5:82:90:26:55:de:41:
                    8e:45:63:2c:0d:a9:4f:71:4b:7c:35:55:0b:c7:97:
                    94:aa:05:e7:a6:ef:1d:ec:2b:bd:d1:ef:fe:22:05:
                    83:f4:ad:a3:98:25:61:e8:15:5e:94:ca:2f:09:e8:
                    32:bc:6d:26:e6:9f:6e:5b:a6:08:b4:34:64:03:cf:
                    69:90:76:f2:e8:18:d1:b1:34:05:a0:c7:82:27:91:
                    17:fd:20:8f:e7:df:83:44:cd:9e:2e:f7:f5:83:8c:
                    c1:75:52:98:d6:e2:26:3d:db:87:7d:37:b4:44:68:
                    e3:e5:3c:5c:eb:11:ad:60:89:1a:63:0d:39:13:83:
                    04:2b:a5:72:3e:da:04:d8:6d:dd:8c:ae:45:1e:69:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:BB:D3:47:2C:F8:3A:7B:7F:E9:9C:45:04:8A:1F:83:3A:77:29
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:3f:c0:eb:eb:a9:81:a5:38:bd:c8:56:a9:be:1f:52:4c:
         03:2e:14:ec:27:3b:b6:66:f6:b0:7b:a0:12:9d:e4:e7:35:a2:
         2e:bc:5f:6b:20:72:79:2d:f2:cb:d7:ae:71:c8:79:de:ab:36:
         b9:b1:7e:49:8a:4a:27:df:3f:c5:f0:8e:1f:a3:45:15:66:97:
         a6:4b:37:7d:95:34:89:31:ea:fe:8b:3f:06:6b:35:35:6e:db:
         22:40:5e:45:30:8b:89:27:82:da:d1:34:9f:b4:5b:2e:26:21:
         78:da:b7:23:9a:4a:87:8f:69:f0:6e:b5:fd:32:2f:4c:f0:47:
         56:dc:09:a9:d0:6c:d5:aa:b9:2d:af:e9:55:a1:ba:b0:38:97:
         71:f2:d4:d5:1b:86:75:44:12:61:09:8f:dd:54:cd:3d:0c:a4:
         1c:00:7b:d2:7f:1d:67:b6:e7:3b:60:12:6b:e1:84:e5:22:8d:
         96:17:c7:da:d6:a2:48:8f:90:ea:35:ba:55:6d:ca:76:52:48:
         c7:d6:7d:13:b2:34:03:34:31:d1:2f:e2:0f:0a:2f:d7:5c:0f:
         60:60:13:e0:0e:78:02:37:97:47:62:77:e2:42:3f:5f:7d:d8:
         25:a5:c1:1c:1d:f4:bb:d6:a9:5e:99:8c:f4:3c:3c:bb:c5:0b:
         7e:70:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:14:37 2026 by rpki-client