Error: rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File:                     BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier:          W7xOarr5pvO5SI+4BBdlKJDR2nVzNRSoEVhO978Nres=
Subject key identifier:   53:48:EA:DD:F7:02:17:FA:1D:C1:39:F8:E7:F4:CE:91:CF:73:7E:FE
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer:       /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial:       04C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number:          04BA
Signing time:             Tue 22 Sep 2026 03:33:12 +0000
Manifest this update:     Tue 22 Sep 2026 03:33:11 +0000
Manifest next update:     Thu 24 Sep 2026 03:33:11 +0000
Files and hashes:         1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: PQllw6QXBG5F0nxcaTga3ryVmRHw+hpZVUBlhT1v19k=)
                          2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
                          3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
                          4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367676CAF, serialNumber=0601535601327F433F8D8427204C50942084AD56
        Validity
            Not Before: Sep 22 03:33:11 2026 GMT
            Not After : Sep 24 03:33:11 2026 GMT
        Subject: CN=6ab1f6f7-ae0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:ac:2c:c0:0e:11:df:48:0e:a8:b9:f6:5a:
                    51:17:a2:30:8a:fc:50:6d:65:79:16:e1:23:8b:18:
                    60:65:b0:a8:cf:d6:01:88:ce:fd:b5:f3:e6:43:04:
                    3b:85:3d:1a:d9:08:84:1f:9d:36:13:4f:27:dc:a8:
                    51:f9:0a:5e:d7:1c:e9:08:ae:b0:ce:81:b5:f0:2f:
                    c6:df:8a:aa:8a:07:e2:2c:78:6d:2d:70:d3:4a:73:
                    de:7b:21:62:f9:de:ac:c5:71:a1:fb:04:3c:25:1a:
                    b6:39:64:d3:b8:a0:28:d6:89:97:47:fa:2a:1b:ae:
                    73:4a:48:40:05:01:af:ba:cb:b4:6f:b3:84:37:68:
                    2e:e5:b4:7d:51:ed:50:3a:27:6d:60:cc:20:2e:1d:
                    a2:70:02:31:4d:27:ff:03:65:4a:35:a8:84:cf:f9:
                    43:5a:31:f8:b4:ad:06:bf:b9:d8:31:58:34:e3:a9:
                    8d:4e:9c:e0:89:fb:03:66:05:0e:1e:dc:e0:80:e3:
                    f1:3d:7a:20:d8:6c:9c:d2:53:2f:5a:85:6e:19:8b:
                    fb:5c:cd:b7:71:00:f2:1e:7c:63:20:c4:0d:20:da:
                    11:34:1d:99:c4:fb:67:35:b5:2f:a6:37:78:b6:57:
                    26:33:18:8c:d9:e0:cd:bf:32:8c:5c:4f:c5:60:f7:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:48:EA:DD:F7:02:17:FA:1D:C1:39:F8:E7:F4:CE:91:CF:73:7E:FE
            X509v3 Authority Key Identifier:
                keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:76:35:4f:97:7f:e5:60:46:23:75:77:40:7e:66:b2:0c:6f:
         b9:4a:52:bc:48:45:a5:51:bf:ff:1a:28:38:e7:67:2a:6c:54:
         c1:0c:53:4b:74:a1:5b:9d:37:44:10:d0:9b:2b:53:c2:e6:96:
         3a:bc:9c:c5:98:35:d2:8f:7a:44:74:38:af:0f:65:a9:c7:0e:
         89:78:b6:0a:9a:3b:79:63:fc:5d:6b:e1:dd:1a:c3:2f:7e:63:
         cf:47:f7:23:b1:a7:48:92:6d:55:b9:68:ae:f1:97:28:8f:5b:
         38:4c:06:30:2e:3c:5f:6e:52:c5:e9:a8:1a:99:42:8f:93:c0:
         d1:46:ad:31:b8:52:3b:86:11:f4:6a:44:9f:7b:18:53:1e:75:
         8e:f6:dc:e7:54:15:63:6e:25:e5:49:15:c3:a3:4f:d0:a5:d7:
         c1:df:67:d7:46:00:5a:a5:b0:d8:65:91:cb:2b:dc:b7:2c:dd:
         73:cb:c1:e0:3f:67:71:a7:90:a4:0d:df:07:92:38:a2:5c:cc:
         bd:87:9f:0f:0f:bc:f1:12:bc:70:99:e7:45:46:25:a1:61:79:
         35:73:5c:28:f8:f0:6a:9d:33:a0:9c:93:14:0f:d3:bf:e8:28:
         f8:d6:62:c3:98:43:bd:e0:0d:b3:7a:2e:e1:2d:a5:2f:bd:56:
         c6:cc:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:02:08 2026 by rpki-client