Error: rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
File:                     CJu_po0WI_pGyRBDO-B2KT4_wrk.mft (raw, json)
Hash identifier:          sbqlemf7Ww4p8JcCKsN5W7fFK5pc0Zwr4d74rW79FuY=
Subject key identifier:   B1:03:46:DE:18:60:FA:57:88:E9:72:5D:0C:56:A1:7D:60:C0:2C:C6
Authority key identifier: 08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
Certificate issuer:       /CN=F365BE6BAF/serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
Certificate serial:       0115
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
Manifest number:          0114
Signing time:             Sun 15 Nov 2026 05:25:56 +0000
Manifest this update:     Sun 15 Nov 2026 05:25:55 +0000
Manifest next update:     Tue 17 Nov 2026 05:25:55 +0000
Files and hashes:         1: CJu_po0WI_pGyRBDO-B2KT4_wrk.crl (hash: Gbi5ZP9dWQlHi2cSvKGd87NfRGarI1NW73UGWrUOk3M=)
                          2: 66B396220A6211F192522FE2DAE4EC9C.roa (hash: lJkq355Hl6QyAz0aA6KQRws7nq8iUzZqbNSPzM4AiT8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE6BAF, serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
        Validity
            Not Before: Nov 15 05:25:55 2026 GMT
            Not After : Nov 17 05:25:55 2026 GMT
        Subject: CN=6af94264-f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:99:49:98:fe:4f:77:ed:3a:4d:5f:88:40:
                    28:e8:5d:4a:fe:1b:18:78:55:65:03:0a:47:59:38:
                    8a:b4:a9:74:8a:82:bf:39:e5:6a:f5:9f:4f:ff:39:
                    04:cb:07:81:a5:c2:82:ac:e9:9c:f7:94:43:f7:cf:
                    db:62:63:33:07:82:a8:c4:9d:55:85:17:0c:f8:6c:
                    c6:59:bc:15:16:5d:89:32:b6:39:6a:21:12:d3:5e:
                    fb:20:54:5a:99:72:d1:b8:ec:be:14:6e:cf:73:ea:
                    e6:1f:ab:b2:c7:bc:20:fc:29:b4:a5:c8:cb:1a:84:
                    5a:b0:7b:6d:af:fd:ce:a5:03:88:5b:6b:5c:8f:59:
                    ca:7a:a4:7d:64:b2:54:b4:b1:fa:12:00:cc:b7:d5:
                    71:60:d6:d4:b9:e5:6d:a4:df:18:1b:59:dd:db:a8:
                    53:f4:75:0e:ed:2b:65:ba:9b:a5:7c:8e:4b:52:50:
                    74:69:ca:90:91:a6:e2:e8:dd:b4:7c:ad:94:d4:30:
                    6f:6c:e4:cd:3f:08:04:ac:ae:ce:60:c3:0a:fb:86:
                    c3:ef:11:ce:8f:6d:13:63:13:e6:0e:3a:dc:ad:cb:
                    36:70:ad:9d:f3:9b:ab:2e:20:04:02:07:44:53:71:
                    e2:0b:2c:f4:26:f9:17:4d:80:0b:4d:21:b2:d9:3b:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:03:46:DE:18:60:FA:57:88:E9:72:5D:0C:56:A1:7D:60:C0:2C:C6
            X509v3 Authority Key Identifier:
                keyid:08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:83:2d:3d:7e:39:c9:0a:74:84:7a:cb:56:a3:1e:79:06:cb:
         ac:b6:a3:21:5d:84:7c:ac:c8:83:60:04:c0:f1:b6:1c:e5:10:
         14:fa:cc:27:a6:e3:9c:24:19:4b:ed:48:8e:8b:a8:e8:41:56:
         70:08:3b:b1:60:4b:e9:36:b6:ca:1b:1c:09:d5:ab:35:35:65:
         35:f6:64:fb:ba:9c:15:bc:78:4d:05:20:30:71:32:e7:1d:6b:
         d8:9a:cb:b3:e3:b9:2a:08:fd:3a:ac:ef:7b:1e:26:43:b8:09:
         d5:f3:d8:d0:94:ae:23:86:e1:56:9d:ca:cf:c7:41:19:3e:3b:
         e8:61:3b:f4:71:17:cc:8a:31:1a:59:01:c4:a1:89:55:b8:b1:
         bd:39:69:73:bd:65:61:f2:6a:d3:e6:0d:b7:22:ba:3b:ea:ff:
         3b:9f:c2:4b:22:0a:9a:7f:a4:08:43:51:22:20:a9:f2:24:06:
         af:03:9a:a3:33:af:65:80:0f:69:f6:1f:7a:c5:92:24:5b:da:
         ef:e2:e1:51:33:d7:26:64:f3:c0:1b:c2:f5:6f:9f:8b:13:d2:
         e2:13:d0:e3:e9:2e:08:ab:91:16:b7:7b:84:b9:b8:88:24:8a:
         23:39:61:03:6d:d2:b4:bc:45:e5:c9:d7:63:41:49:ce:d7:1c:
         33:7d:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:30:36 2026 by rpki-client