Error: rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
File:                     CJu_po0WI_pGyRBDO-B2KT4_wrk.mft (raw, json)
Hash identifier:          WVkv8ygdj+jGnj4iZvr7sIW/KiuYyXDDyyyn3x4JhTE=
Subject key identifier:   F9:3C:4E:48:6D:DC:E1:FB:44:0D:56:51:6D:6F:FD:AC:7C:40:8A:72
Authority key identifier: 08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
Certificate issuer:       /CN=F365BE6BAF/serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
Certificate serial:       E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
Manifest number:          E1
Signing time:             Fri 25 Sep 2026 05:27:37 +0000
Manifest this update:     Fri 25 Sep 2026 05:27:36 +0000
Manifest next update:     Sun 27 Sep 2026 05:27:36 +0000
Files and hashes:         1: CJu_po0WI_pGyRBDO-B2KT4_wrk.crl (hash: 8jX6cK2BtB7jWq3aIFPEeN7ppt16AYKvG7NCwO7oE+Q=)
                          2: 66B396220A6211F192522FE2DAE4EC9C.roa (hash: lJkq355Hl6QyAz0aA6KQRws7nq8iUzZqbNSPzM4AiT8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE6BAF, serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
        Validity
            Not Before: Sep 25 05:27:36 2026 GMT
            Not After : Sep 27 05:27:36 2026 GMT
        Subject: CN=6ab60648-918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:4f:99:74:e5:a0:52:07:f0:b7:3a:b2:9e:
                    b7:55:e1:37:15:cd:a9:57:3e:3b:cc:98:de:32:e6:
                    89:04:1b:74:40:47:64:a6:f5:1c:22:4d:ec:e2:76:
                    2a:da:28:46:38:b0:f4:b7:31:76:1d:50:a6:13:53:
                    51:dd:24:d5:eb:96:4c:e4:21:5f:11:a2:a1:b8:2c:
                    63:f3:e2:ec:ed:9a:61:08:b7:48:fb:53:5f:2c:80:
                    c8:3e:5a:2a:ed:f0:f2:7b:9f:fe:cf:08:81:23:5e:
                    0e:ac:a4:14:43:01:cd:a4:f4:5c:a7:a8:f0:8a:f1:
                    4b:a5:96:a5:7f:67:8f:97:a5:a1:d0:2d:da:82:b0:
                    5e:0c:60:40:a3:ee:0e:f3:b0:d4:6f:2a:3f:cf:92:
                    87:0b:07:2b:7f:d1:4d:c4:ea:66:d5:a7:9f:59:b1:
                    1d:7d:8c:93:7a:1f:4b:03:7f:ad:b5:c5:05:95:f2:
                    c6:9a:5f:a4:90:52:21:fb:4b:c4:d2:0e:3c:a8:18:
                    66:e2:85:49:0b:29:3c:9a:a2:a8:a4:5f:5f:40:cd:
                    e4:39:42:09:30:49:a1:2c:9b:6a:09:f3:16:5f:f5:
                    fa:4a:3a:0c:99:73:c6:1c:0d:fe:c6:e4:6f:e5:f9:
                    6f:7b:df:79:f9:26:62:ce:31:32:6a:2b:ee:a8:38:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:4E:48:6D:DC:E1:FB:44:0D:56:51:6D:6F:FD:AC:7C:40:8A:72
            X509v3 Authority Key Identifier:
                keyid:08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:20:28:04:d5:21:59:11:cd:89:47:6a:f8:51:56:91:88:87:
         2b:ba:8d:36:43:03:f7:67:1c:a2:12:55:7f:59:d7:b2:69:18:
         e2:e2:3d:71:23:72:83:d1:71:49:62:f3:1c:61:fc:31:ab:7f:
         c7:42:70:92:3a:77:89:c2:d0:c9:0d:dc:5a:dc:9d:03:a1:37:
         95:17:f6:7f:bb:1b:e7:46:93:6c:2d:d3:41:84:28:5b:b0:c1:
         ee:07:87:10:01:87:bd:c6:75:d8:d8:92:e1:31:54:91:32:80:
         c4:77:cb:c5:84:ee:27:50:20:cc:98:ff:f2:40:38:1e:73:aa:
         1f:75:1f:4f:59:de:e2:5d:c6:ec:2c:02:d1:08:23:ec:fc:b6:
         d9:4d:f3:ac:4b:51:a4:04:b2:c0:3f:77:90:b9:28:01:bb:a1:
         7c:36:fb:ab:cf:28:69:ce:05:de:54:31:ea:8a:2b:f9:c8:2c:
         a3:f6:d6:9f:89:ba:6f:ea:50:6b:79:af:e8:88:a8:db:ed:93:
         a4:72:3d:62:91:9f:b0:98:77:68:2d:c0:52:a6:74:15:14:30:
         68:63:a2:15:00:07:8c:94:f5:34:41:aa:63:b4:f6:30:93:e4:
         c7:8e:ff:d4:28:bf:b1:cc:ef:6f:c4:06:cc:d6:ee:4a:17:a4:
         86:54:40:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJFNkJBRjExMC8GA1UEBRMoMDg5QkJGQTY4RDE2MjNGQTQ2QzkxMDQzM0JFMDc2
MjkzRTNGQzJCOTAeFw0yNjA5MjUwNTI3MzZaFw0yNjA5MjcwNTI3MzZaMBgxFjAU
BgNVBAMTDTZhYjYwNjQ4LTkxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5CE+ZdOWgUgfwtzqynrdV4TcVzalXPjvMmN4y5okEG3RAR2Sm9RwiTezi
diraKEY4sPS3MXYdUKYTU1HdJNXrlkzkIV8RoqG4LGPz4uztmmEIt0j7U18sgMg+
Wirt8PJ7n/7PCIEjXg6spBRDAc2k9FynqPCK8UullqV/Z4+XpaHQLdqCsF4MYECj
7g7zsNRvKj/PkocLByt/0U3E6mbVp59ZsR19jJN6H0sDf621xQWV8saaX6SQUiH7
S8TSDjyoGGbihUkLKTyaoqikX19AzeQ5QgkwSaEsm2oJ8xZf9fpKOgyZc8YcDf7G
5G/l+W9733n5JmLOMTJqK+6oOBnPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+TxO
SG3c4ftEDVZRbW/9rHxAinIwHwYDVR0jBBgwFoAUCJu/po0WI/pGyRBDO+B2KT4/
wrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCRTZCL0FFNThDOTQ0MEE2MTExRjE4OUNDMTBERURBRTRFQzlDL0NKdV9w
bzBXSV9wR3lSQkRPLUIyS1Q0X3dyay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NKdV9wbzBXSV9wR3lSQkRPLUIyS1Q0X3dyay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJFNkIvQUU1OEM5NDQwQTYxMTFGMTg5Q0MxMERFREFF
NEVDOUMvQ0p1X3BvMFdJX3BHeVJCRE8tQjJLVDRfd3JrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQICgE1SFZEc2JR2r4UVaRiIcruo02
QwP3ZxyiElV/WdeyaRji4j1xI3KD0XFJYvMcYfwxq3/HQnCSOneJwtDJDdxa3J0D
oTeVF/Z/uxvnRpNsLdNBhChbsMHuB4cQAYe9xnXY2JLhMVSRMoDEd8vFhO4nUCDM
mP/yQDgec6ofdR9PWd7iXcbsLALRCCPs/LbZTfOsS1GkBLLAP3eQuSgBu6F8Nvur
zyhpzgXeVDHqiiv5yCyj9tafibpv6lBrea/oiKjb7ZOkcj1ikZ+wmHdoLcBSpnQV
FDBoY6IVAAeMlPU0QapjtPYwk+THjv/UKL+xzO9vxAbM1u5KF6SGVEAB
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:00:23 2026 by rpki-client