Error: rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          RnA0/i/k5Kl18ZzYADLE/ta1sKR4YAzMP+X1rBzKdBo=
Subject key identifier:   58:4B:0F:C2:7A:85:5A:25:25:2D:22:98:F4:7D:73:67:48:BC:AB:1B
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       04F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          04F1
Signing time:             Fri 25 Sep 2026 03:26:35 +0000
Manifest this update:     Fri 25 Sep 2026 03:26:34 +0000
Manifest next update:     Sun 27 Sep 2026 03:26:34 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: W/eeXAV6iJgNF/6NQQsyiPjEbkD1GOtpS8SywSlQnCs=)
                          2: 7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa (hash: o3L0vuoDmUBUb+//mBzsTCTXHyVLpl7JtPp6VuXXuk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Sep 25 03:26:34 2026 GMT
            Not After : Sep 27 03:26:34 2026 GMT
        Subject: CN=6ab5e9eb-feb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:d4:2c:64:5c:dd:39:bc:0f:87:7e:22:10:
                    e9:ab:d6:14:db:a5:c3:a5:db:6d:72:fe:7f:62:47:
                    73:69:3c:ab:27:6b:5a:de:45:a0:1a:cc:06:57:3b:
                    7b:d3:11:82:6c:81:cb:fd:a8:cb:ad:3c:3d:d6:d1:
                    7f:fd:9f:6e:05:bc:eb:50:94:28:2b:bd:83:8a:a8:
                    11:8b:c9:0f:d5:47:b7:86:40:df:80:a3:5f:7c:20:
                    c1:1d:87:d9:43:88:81:b3:3e:84:ab:11:0d:d0:4e:
                    64:a9:4f:b1:cf:4a:c4:11:53:ab:3a:90:20:87:11:
                    0f:b2:32:3c:ef:c4:42:b2:af:8e:83:14:bd:2e:1c:
                    9e:20:8e:c3:87:5a:c6:20:49:15:fd:a7:18:73:fa:
                    5e:29:df:c2:04:4c:85:d2:8c:66:2c:a7:5e:e6:6f:
                    ce:a0:62:06:4c:b3:3e:80:71:88:f2:a6:ff:5f:8e:
                    53:c9:12:35:50:3d:3d:ba:82:17:90:1f:8d:dd:26:
                    59:d6:2e:80:c6:92:aa:2e:2f:77:5a:98:08:49:ca:
                    1b:de:41:74:fe:54:45:07:a6:f7:de:d2:16:c3:4d:
                    99:a4:76:d7:cb:e3:0d:d2:77:51:0e:a1:75:cf:33:
                    53:39:00:2f:1c:b8:c4:b0:79:6d:c1:6c:8d:1a:4d:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4B:0F:C2:7A:85:5A:25:25:2D:22:98:F4:7D:73:67:48:BC:AB:1B
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:26:9e:7b:5d:09:7d:69:37:43:b2:bc:bb:6f:41:df:f9:e2:
         31:39:ac:ef:de:ba:07:83:57:17:6e:69:3f:59:cd:0f:93:79:
         0b:10:66:fb:1e:12:d2:81:c7:5b:5d:04:90:1a:ef:7a:06:19:
         a6:f2:92:64:ae:25:a2:45:d7:99:a6:6f:e4:39:56:34:9e:30:
         9e:94:47:74:25:73:2f:14:65:bd:66:17:28:26:86:a3:d5:33:
         aa:27:4c:d2:f7:c2:c5:9c:e0:0d:e6:44:ad:2f:e9:41:2e:e0:
         e5:4d:0b:1d:dc:21:51:ba:d3:f0:88:fb:6d:9f:cf:9d:91:4a:
         ee:5d:23:35:f4:e8:3c:c7:18:f4:36:17:f1:7c:f0:d3:0a:c7:
         0d:28:d0:8e:00:78:6d:7a:18:dd:65:ea:9b:14:b6:4f:2f:2a:
         0c:fe:72:0e:3f:b3:c0:b9:f6:40:39:ea:ef:f3:ef:7a:f2:d7:
         2b:71:62:2a:1f:be:53:10:6d:6b:b7:fd:78:1f:46:bf:75:18:
         96:fb:87:48:84:33:36:c8:e2:96:67:26:32:e5:92:65:fe:9a:
         04:13:b5:93:9b:51:4b:b3:33:30:79:89:6f:d1:cf:5d:5c:60:
         2b:05:8e:4d:20:a1:e6:f5:ef:a0:c2:90:6c:85:63:6d:65:ce:
         c2:5c:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:00:25 2026 by rpki-client