Error: rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
File:                     5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft (raw, json)
Hash identifier:          Rl2LRwdj1o4UpeZ+gPmY3ajyNoxMaETImlbzMtwoskE=
Subject key identifier:   CE:2F:E9:03:B2:49:DB:9C:1B:09:11:78:93:33:DE:DC:AC:03:0C:EF
Authority key identifier: E6:35:24:6F:EB:F7:07:53:2E:DA:D2:02:1A:FC:87:48:C1:71:16:AF
Certificate issuer:       /CN=F362AF0DRI/serialNumber=E635246FEBF707532EDAD2021AFC8748C17116AF
Certificate serial:       01EC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
Manifest number:          01E6
Signing time:             Sun 15 Nov 2026 05:01:55 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:54 +0000
Manifest next update:     Tue 17 Nov 2026 05:01:54 +0000
Files and hashes:         1: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.crl (hash: N/iwKmPUuH4pIBIiw0alFdeJaqrSly2TxXMvXI2nB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
                          rsync://rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF0DRI, serialNumber=E635246FEBF707532EDAD2021AFC8748C17116AF
        Validity
            Not Before: Nov 15 05:01:54 2026 GMT
            Not After : Nov 17 05:01:54 2026 GMT
        Subject: CN=6af93cc3-3960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:da:36:ea:a5:ab:a1:77:4b:c5:76:8a:ff:
                    f1:0c:f2:15:29:86:eb:b2:81:59:57:2f:fd:1e:66:
                    ed:6a:e1:b0:dd:8b:25:93:d2:26:a7:85:9d:73:1c:
                    a0:51:50:28:4c:c5:49:4b:ec:e5:43:5f:36:ca:79:
                    c6:26:c8:3a:64:4d:b9:90:3d:f0:d4:7f:45:1e:5b:
                    c7:af:35:8b:b6:7a:bf:80:b3:41:9d:62:ec:cb:f8:
                    c9:bd:57:51:f2:3b:bf:ff:1c:c0:82:14:7c:ff:40:
                    41:4f:4d:0b:08:1d:62:f7:53:86:dd:3b:0e:10:a8:
                    1b:e8:5a:3a:e3:37:2a:32:f2:07:a4:25:3c:0c:bf:
                    fc:10:8d:54:d4:07:f3:60:e1:94:a9:b8:dc:56:ac:
                    da:af:ed:9e:be:5c:d1:1c:20:7b:86:ad:f1:a2:f4:
                    e6:b9:23:5d:3a:56:93:89:df:ae:34:26:41:a3:2c:
                    bd:52:58:a4:89:34:8c:3a:c9:17:9f:d8:81:8b:91:
                    f3:a4:ec:03:2c:74:3a:e2:c8:e0:84:ff:47:61:63:
                    27:d3:1d:e4:2e:ee:5c:4d:ca:41:11:9b:6a:69:e2:
                    25:25:ab:7c:e0:f8:84:9e:0f:0e:3e:5a:c5:10:1c:
                    e1:23:1f:2a:ee:81:72:5c:f4:55:8a:5c:8a:53:04:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:E9:03:B2:49:DB:9C:1B:09:11:78:93:33:DE:DC:AC:03:0C:EF
            X509v3 Authority Key Identifier:
                keyid:E6:35:24:6F:EB:F7:07:53:2E:DA:D2:02:1A:FC:87:48:C1:71:16:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:55:10:20:be:f4:14:4c:21:20:50:dd:8a:a4:a8:cc:3a:
         0c:0f:f0:f2:9c:c5:7e:b2:b1:52:b3:df:41:a9:55:be:24:04:
         aa:5e:ca:b5:c3:7d:75:be:43:d2:df:ce:d6:9e:50:51:41:2e:
         61:df:c3:29:9c:7d:51:2c:d5:9c:81:52:cf:14:a9:79:c9:45:
         87:9d:3a:08:db:41:d1:26:69:47:42:b3:9e:6b:cc:29:c1:6d:
         2f:73:40:5a:24:ed:70:9f:43:b0:08:4d:cb:0b:39:57:27:00:
         8c:99:f4:c6:37:a6:54:f5:a6:0e:da:da:c1:19:c1:c7:17:44:
         a0:5e:92:62:90:b3:16:a2:3c:a7:cf:4f:61:11:eb:65:87:2d:
         5c:62:ed:f7:77:07:1b:bf:a9:f5:ef:a2:59:2e:d5:fa:c2:68:
         5b:c1:34:67:40:38:e4:19:d4:07:d6:9f:42:77:33:a9:dd:98:
         7b:51:c8:2e:b6:47:d0:f6:d4:85:e0:03:e3:a5:d2:08:6f:72:
         8c:50:9a:c5:6b:32:cc:75:ee:16:97:10:91:c1:50:04:c5:26:
         a9:e3:f3:29:8a:ef:6b:db:74:d4:c6:19:ad:30:bf:87:91:25:
         7b:36:b8:2e:54:ba:a1:5c:da:f1:1f:cc:3c:1b:a3:d6:b1:5d:
         85:33:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:00:51 2026 by rpki-client