Error: rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
File:                     BinJnUdgwom4TNvs8bbBPPUl6q8.mft (raw, json)
Hash identifier:          KFdweLcT6COGtF8/hg5psWaY7O/Pk1YhB+iA+9duhzI=
Subject key identifier:   81:AA:96:7D:06:3C:61:AC:DF:40:38:00:D3:15:F3:99:4F:A9:23:F5
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       050A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
Manifest number:          04FA
Signing time:             Tue 27 Oct 2026 03:30:06 +0000
Manifest this update:     Tue 27 Oct 2026 03:30:05 +0000
Manifest next update:     Thu 29 Oct 2026 03:30:05 +0000
Files and hashes:         1: BinJnUdgwom4TNvs8bbBPPUl6q8.crl (hash: ZqdtUTxd1oqCthcFe7Zrgtq1v5XwGuYzCHcdZQgKQUw=)
                          2: 2850010E216B11EFB3F618137DDC24C2.roa (hash: 0jME1ZzrI4sNnNZjfeG38v9huXsz3LZTpURGBtXzEAw=)
                          3: 51542E68216B11EF9F7AF3167DDC24C2.roa (hash: 4QCeXvrc6kg/JIOMdU4vEPvtTh3WWdhKcmrMjlVBHNk=)
                          4: A67CF5BA216A11EFA90D51127DDC24C2.roa (hash: lsxPoy4LkYh0ebWwRE+vefdBa5LLS6CukBLh7U9d9E4=)
                          5: 55EEE540216A11EF9A5E590E7DDC24C2.roa (hash: FgSrL2A61qR530yDTlLI1PpGN3TVb0JzE3QW/HRydIw=)
                          6: 1F5F2FF8216A11EFBE9F000E7DDC24C2.roa (hash: Lnp4R2zpiassu92nP7+9bZsA7WacYQhSdB9Irhb4Gho=)
                          7: CF99B532216A11EFBD87B3127DDC24C2.roa (hash: jOjj4Xh+2NT4yOAFMCOKRdCM3mQyy3CpEf+pl4OtA9Y=)
                          8: F7891F7E216A11EFAAB9DD127DDC24C2.roa (hash: gR6HfHMgVO0uVKQ4QeKo2uZ6uComtLRb0sTj4ZsT1hQ=)
                          9: 80627120216A11EF980B8E0E7DDC24C2.roa (hash: iJq4XGcPgxPLrs5UWbDYKLBJP1q4j5+vrVCECQwMuoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI, serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Oct 27 03:30:05 2026 GMT
            Not After : Oct 29 03:30:05 2026 GMT
        Subject: CN=6ae01abe-235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:ce:74:d9:87:f1:21:d0:7f:02:ba:48:4e:
                    ad:49:1b:af:36:46:33:99:1a:17:7b:36:21:71:5d:
                    42:f3:7a:ec:30:50:e6:86:d0:44:6c:e6:a2:43:2f:
                    b2:80:6c:19:81:ea:32:a9:ed:a3:bc:ca:f6:87:af:
                    a4:c5:9d:f4:bd:c7:f0:30:8d:b7:68:ca:a4:f0:2b:
                    4f:f0:74:1e:44:60:97:15:c0:f5:0a:22:ea:2e:83:
                    43:87:33:57:7d:f3:86:6d:72:d7:cd:68:be:3a:60:
                    b7:a4:52:49:82:b6:5f:ec:85:40:77:d7:f1:01:09:
                    4c:22:94:ba:e8:4b:60:30:13:52:8a:98:75:df:06:
                    4b:5b:6a:4c:d5:68:93:d7:c7:d4:cf:a2:4b:95:a2:
                    a4:2f:e5:d7:da:99:24:70:97:58:a5:86:7d:8b:b7:
                    e7:e6:25:5b:20:20:12:66:3f:c3:75:86:c6:5f:2c:
                    92:25:46:f6:ed:f2:9f:cf:2f:6f:44:86:f3:c6:0b:
                    6c:e3:03:5a:bb:54:29:09:27:07:77:2e:10:a7:02:
                    51:39:51:fd:0e:20:7e:70:25:c8:ce:ce:96:b0:d8:
                    e8:09:80:5f:3e:43:57:9d:7a:38:fe:b6:b6:69:0d:
                    37:93:67:23:9c:d7:ca:fd:d0:b4:b0:d8:cf:b9:4b:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AA:96:7D:06:3C:61:AC:DF:40:38:00:D3:15:F3:99:4F:A9:23:F5
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3b:8e:8f:13:38:82:01:86:d0:5f:5c:ed:3f:04:52:c5:20:
         38:bc:36:b5:e0:5c:cf:59:6f:f7:89:dc:c6:ae:8e:4d:aa:91:
         66:80:ab:9f:a8:a4:f3:32:15:a2:0b:2a:7e:7d:02:8b:bc:b6:
         a5:36:f0:51:45:87:b9:26:f9:bf:82:b7:2d:39:a5:c0:9d:28:
         2c:22:69:bf:7b:02:46:6c:0c:63:28:dd:17:75:92:70:8c:a1:
         be:cc:45:22:9d:a4:e1:a7:c6:de:01:fd:e3:e9:16:b7:1b:76:
         84:e6:1d:45:a1:58:da:b2:82:24:de:2f:fe:e7:b0:6b:7f:3d:
         ce:4a:81:a2:c6:2d:14:3a:d3:7f:32:7d:37:a3:e0:a3:61:58:
         fb:99:88:d4:e0:b4:f2:9a:a3:6a:d8:32:66:99:59:27:3b:98:
         44:c1:20:04:7c:fa:cb:4f:50:d9:06:84:39:a1:cf:0e:fe:4a:
         22:94:5c:6e:f3:17:9a:6e:51:c7:7b:b2:b9:01:ab:32:19:80:
         c4:b4:8c:d1:ba:ca:8c:95:7c:25:74:3f:53:4a:af:62:b2:4f:
         5d:47:ea:1c:e0:c6:6d:a4:b9:31:8c:d0:7e:04:ee:1e:a4:68:
         5e:c7:55:76:e2:2e:9c:8c:d5:58:b2:50:0c:56:74:a2:f7:1f:
         ed:aa:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:27:33 2026 by rpki-client