Error: rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          9/t/upYsBPssbhfyp8vxhtAWLo7uN5EZsWZtB0hbvcU=
Subject key identifier:   AA:08:7C:35:34:33:2D:26:02:44:68:CE:FF:4D:FF:7F:FC:51:AC:CB
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       053A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          0537
Signing time:             Sun 01 Nov 2026 03:22:38 +0000
Manifest this update:     Sun 01 Nov 2026 03:22:37 +0000
Manifest next update:     Tue 03 Nov 2026 03:22:37 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: 9+jYaDs2vfyZnJwSMiYrPIoqsAs2vZACCnkBpphx5z0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 03:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
        Validity
            Not Before: Nov  1 03:22:37 2026 GMT
            Not After : Nov  3 03:22:37 2026 GMT
        Subject: CN=6ae6b07e-1dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:7a:38:c6:df:d6:ed:d0:d7:96:c8:c6:f9:
                    54:82:66:d0:e3:e2:d9:b5:46:8f:70:c6:2d:4d:75:
                    11:8f:c2:bf:bd:12:e4:f3:e8:33:f2:f2:0f:f3:61:
                    b5:af:7a:4b:cb:93:03:d3:f4:20:d3:f9:e0:7b:ea:
                    ea:4c:a2:8c:f8:03:db:2f:cb:48:ab:3a:28:8a:91:
                    55:95:4a:c8:40:0c:f6:9e:ca:32:a5:d4:e6:aa:ca:
                    28:9b:3e:60:3a:e5:e2:74:06:61:16:06:cb:ac:e5:
                    11:3c:c8:fd:a6:eb:d9:1e:b2:04:b9:3c:87:66:36:
                    18:f7:66:67:f6:a5:39:11:f8:76:ba:67:33:25:a8:
                    85:e9:ad:d8:2a:40:63:bd:92:f2:7f:fb:b9:9b:e9:
                    08:74:99:08:ef:16:10:ee:b5:c5:0d:09:fd:a4:56:
                    d8:ec:e6:1c:d5:e2:74:ea:89:30:4a:cd:26:12:0c:
                    96:95:1e:0a:8d:c4:0c:8a:f3:a4:a3:07:22:07:a0:
                    60:85:e0:96:02:14:1a:02:c6:79:34:8e:7c:a4:1d:
                    9d:0d:be:a0:9c:d7:c0:58:0a:13:13:be:04:ba:d7:
                    ae:20:40:ea:ee:97:da:07:e4:9a:92:d2:68:38:95:
                    cb:a8:95:63:9e:d7:0b:34:d0:89:28:f0:89:d4:92:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:08:7C:35:34:33:2D:26:02:44:68:CE:FF:4D:FF:7F:FC:51:AC:CB
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:71:58:bd:39:57:76:6e:e1:d5:dc:51:c6:40:74:e8:06:
         16:6d:1c:f4:d8:b3:aa:a6:c5:d8:cc:08:36:2f:c6:2b:08:6d:
         6e:af:c0:cb:13:d3:b7:ee:e5:c7:5d:69:33:8a:b9:d8:51:52:
         8a:62:22:3d:80:3f:27:aa:ae:ea:ba:30:52:ce:12:da:52:be:
         c6:e3:99:5f:fe:d7:29:03:ee:96:88:96:78:46:31:b7:bb:dc:
         71:af:d8:05:2a:1c:a4:db:35:15:4d:fe:24:f1:6e:18:22:a3:
         2d:4a:15:31:6d:0e:b6:81:cf:47:ab:0d:de:24:a4:69:6a:ca:
         6f:8c:bf:77:53:b9:84:b5:cd:8c:fc:cb:3f:c4:8b:bf:de:8d:
         c4:02:72:94:29:44:9b:cd:2a:13:b5:b8:cd:48:33:eb:7c:52:
         23:8f:93:cf:34:5f:30:6c:77:69:6d:74:ed:6e:67:af:e4:f4:
         d6:2e:37:af:82:2c:cf:56:09:0e:13:71:74:55:8c:86:1e:4b:
         1f:b6:5a:80:9a:56:ad:7a:88:80:7b:7b:23:ce:35:6b:80:97:
         a3:84:40:dc:45:c3:c7:fd:42:20:92:7a:25:cd:25:e6:b1:26:
         24:02:11:65:af:77:3c:a0:d8:5e:b6:fe:05:8a:f4:11:28:4b:
         ca:b8:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 04:06:40 2026 by rpki-client