Error: rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
File:                     btXWd58RVP-e4YoO_T3bdQZOoeU.mft (raw, json)
Hash identifier:          uBWk47b5rG4hrXG9Drox/w16IMHAxGUnhrMtCctqDSg=
Subject key identifier:   23:41:4D:DB:CE:A2:0D:AA:F5:CF:A4:32:11:0A:AF:E5:51:B8:91:5E
Authority key identifier: 6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5
Certificate issuer:       /CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
Certificate serial:       033B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
Manifest number:          0339
Signing time:             Tue 29 Sep 2026 04:19:09 +0000
Manifest this update:     Tue 29 Sep 2026 04:19:09 +0000
Manifest next update:     Thu 01 Oct 2026 04:19:09 +0000
Files and hashes:         1: btXWd58RVP-e4YoO_T3bdQZOoeU.crl (hash: +j9xiMbv1p9PoSYosPsg3u0FjqKSt/YlbZATNFGHW+s=)
                          2: 75003F36428711EFA3917E69762E951A.roa (hash: YrqehZ9aTTD1SJptceMXxXj5BazN802PieW8aLLUgFI=)
                          3: B08DAB06428711EF998F6D6D762E951A.roa (hash: wgn3fcAb9qeYaD4t6OvWITLhpGB5UIMeJ/S+H9QW0zg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                          rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1RI, serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
        Validity
            Not Before: Sep 29 04:19:09 2026 GMT
            Not After : Oct  1 04:19:09 2026 GMT
        Subject: CN=6abb3c3d-c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:56:c0:9d:08:e8:9a:a3:03:9f:83:72:f7:
                    29:9d:57:1e:f2:7d:95:98:cb:c2:43:9c:9e:e6:3d:
                    8c:19:02:bb:d7:eb:0a:7a:f8:0a:9f:8f:44:7a:d6:
                    72:17:4a:35:ca:52:cc:3a:ef:1b:ac:39:a4:80:95:
                    79:ed:d8:55:df:1e:bd:be:4e:48:84:5f:95:fd:4d:
                    15:28:45:4c:26:0e:33:9d:b0:ee:61:04:e7:e2:af:
                    ac:e7:de:2e:28:0f:92:42:25:07:50:e3:c9:ba:92:
                    8e:34:e8:13:91:1d:1a:03:22:8c:07:e0:e2:d3:db:
                    b6:fc:d6:1f:ee:ce:d9:8c:17:c7:6a:ee:b0:a2:bd:
                    35:88:32:15:ff:f4:8e:47:c4:fe:ca:78:d8:bd:2c:
                    6e:86:94:74:76:07:ed:1e:3d:4d:b3:e0:be:a8:5b:
                    7c:45:f2:aa:15:38:b7:38:dd:b9:71:1f:d1:93:ac:
                    4d:2b:aa:46:99:39:7a:a5:00:ec:b3:a3:20:33:8b:
                    c1:a0:1a:81:70:a6:1f:72:58:4c:80:9a:40:5f:ae:
                    1a:7d:81:bb:61:97:bc:86:65:4c:74:1d:73:05:ff:
                    14:6a:ab:80:18:38:73:fd:9e:43:fc:5b:c9:8b:d4:
                    a4:3b:11:6a:63:2f:05:3f:14:82:5e:01:3d:dc:3f:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:41:4D:DB:CE:A2:0D:AA:F5:CF:A4:32:11:0A:AF:E5:51:B8:91:5E
            X509v3 Authority Key Identifier:
                keyid:6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fc:9a:d6:c9:74:51:6b:83:89:d6:ba:16:4a:22:bf:de:08:
         14:d7:3f:81:90:2d:32:28:6b:f0:c2:05:4d:84:c1:06:cf:a9:
         d9:a8:c3:3e:dd:e6:aa:77:e7:07:de:71:06:7f:5d:e1:97:26:
         97:d0:70:3c:24:c9:ff:63:02:c8:eb:ea:fb:b3:2f:cb:29:ab:
         90:1a:38:c6:fa:13:8d:8d:cb:eb:04:0b:b0:f7:50:35:18:20:
         9b:fb:02:c1:23:e4:1d:d4:23:5a:9e:16:06:2b:2f:78:52:a7:
         58:05:19:07:49:d9:44:38:37:37:17:ff:bc:51:10:7e:2d:68:
         02:49:f4:65:6d:ef:76:5a:dc:db:73:8a:46:93:5f:4b:1e:7a:
         99:12:71:fc:17:18:b5:d9:6e:a7:4c:e3:ea:a6:90:e3:7e:1d:
         e8:6a:3d:87:f3:54:40:6a:79:31:61:b1:55:c6:06:47:9d:ab:
         35:c7:2e:9d:54:07:93:65:30:73:41:eb:e9:c2:91:6c:4b:d5:
         f6:90:4f:f3:dd:50:24:88:2d:33:74:46:9e:8d:c6:3d:01:c7:
         1c:e3:ec:03:10:40:c1:35:1c:de:fc:ef:7e:27:5a:60:47:81:
         f1:61:53:21:01:75:01:5a:2d:be:98:88:fc:8a:79:46:5d:ff:
         7c:75:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:42:25 2026 by rpki-client