Error: rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.mft (raw, json)
Hash identifier:          D20a/yEyBYmis038LLKuQqGO+p/VYq3FHYi7ZoOnDkM=
Subject key identifier:   07:5F:0B:60:CE:D5:66:4B:B5:C6:C7:3B:4B:56:97:4E:66:15:6C:F4
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Certificate issuer:       /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial:       0747
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
Manifest number:          0746
Signing time:             Wed 23 Sep 2026 02:27:09 +0000
Manifest this update:     Wed 23 Sep 2026 02:27:08 +0000
Manifest next update:     Fri 25 Sep 2026 02:27:08 +0000
Files and hashes:         1: 48LJS_VpO0HwWh1WV9GnhLXVcmE.crl (hash: YUxJVn562itIaUnv/rlkRPNE5+FuXb7RWGdfCKs/65E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                          rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5RI, serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
        Validity
            Not Before: Sep 23 02:27:08 2026 GMT
            Not After : Sep 25 02:27:08 2026 GMT
        Subject: CN=6ab338fd-e196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:1d:02:a7:f0:bd:5a:74:b5:6b:b0:01:d5:
                    7e:15:e1:19:f1:40:81:30:f6:02:7f:cd:7f:c4:ee:
                    41:b8:07:c5:e4:d9:af:28:48:22:ce:64:74:59:5f:
                    16:ab:61:66:fd:9b:c3:30:e0:cb:56:b8:c6:86:61:
                    e4:d3:90:9b:9a:9a:f5:81:3a:2a:34:18:cd:60:1b:
                    3a:73:13:15:5c:c4:64:b4:42:08:1e:12:41:c2:d0:
                    65:8d:05:4c:d4:27:aa:5b:8b:1b:c4:6d:25:9a:94:
                    37:8a:eb:bf:5c:41:17:6b:6d:a9:5f:b6:19:99:9b:
                    f4:15:b9:08:9e:62:6c:fc:af:65:f6:e7:8d:c6:2f:
                    6d:52:a4:96:7c:ce:02:5a:0c:24:07:10:04:1e:d4:
                    9a:22:8a:97:fb:4e:10:30:49:86:c4:93:e6:9e:23:
                    4b:fe:b6:ab:09:7c:70:b1:68:37:d8:3f:ad:13:d4:
                    3b:5c:35:9d:ed:56:2f:75:28:87:68:9b:32:14:92:
                    95:98:54:89:e7:5d:3c:a9:c9:87:c8:d8:92:f1:15:
                    ea:cb:96:58:2b:28:b3:8d:c8:f9:52:d6:dc:97:40:
                    02:1e:98:0c:55:7d:db:26:c8:0d:06:be:10:d0:e2:
                    b6:c9:6d:90:14:4c:9b:92:32:c3:3a:bc:c8:3e:d9:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5F:0B:60:CE:D5:66:4B:B5:C6:C7:3B:4B:56:97:4E:66:15:6C:F4
            X509v3 Authority Key Identifier:
                keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:00:a0:9d:6f:c4:18:f2:06:95:b4:bd:c2:9f:43:a5:fc:
         61:9e:55:6e:1b:9c:f5:b9:e0:c4:4b:a6:75:08:86:ff:72:d8:
         c9:bc:5e:60:d5:8b:1e:df:e6:dd:12:a3:ff:95:50:36:d7:d6:
         b6:8a:e0:52:92:43:7e:d0:c4:19:20:44:be:a3:8d:4d:b2:4a:
         d6:d9:09:e6:ba:15:4e:70:20:0b:59:cb:3d:02:6c:80:63:34:
         46:38:eb:e0:dd:c9:07:a4:d9:3b:8e:6b:a1:5d:51:44:a6:0a:
         4e:f0:3e:e0:74:b0:07:d6:47:a3:5e:b6:23:ee:36:4a:5b:6a:
         c9:76:63:4a:01:5d:fa:38:ee:e2:5b:f8:eb:f4:62:bd:08:c0:
         4b:99:65:6c:b2:00:88:7f:b1:5b:5a:48:8d:99:69:7c:32:14:
         3b:fb:e0:b6:0e:d7:df:ab:69:e9:41:20:ec:5c:17:99:a5:1c:
         39:69:63:fd:3c:21:95:79:9a:1c:ac:25:a2:29:b1:2e:8e:65:
         b1:41:ef:c2:8e:b5:f0:db:68:ff:7b:ea:b8:f0:38:0c:01:f3:
         e0:3e:04:38:3a:a0:5b:d3:82:ea:8c:c0:dd:e3:89:da:f8:25:
         5a:17:22:59:0b:e0:a0:78:03:eb:8b:43:fb:59:44:51:f5:f4:
         80:68:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:06:41 2026 by rpki-client