Error: rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          sqe2I4S9uS3+GKZNVBJD5lAQjaaY+OFmigVgyhM+nEc=
Subject key identifier:   90:77:F4:D3:77:52:DE:BC:71:5D:C3:2E:06:90:F0:D4:DA:8C:E7:5C
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       0548
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          0545
Signing time:             Sun 15 Nov 2026 03:21:02 +0000
Manifest this update:     Sun 15 Nov 2026 03:21:01 +0000
Manifest next update:     Tue 17 Nov 2026 03:21:01 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: 3Y+/VxgaoUd2ZBQEibRPnLm9KBMwneInQwkuXsbYllI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
        Validity
            Not Before: Nov 15 03:21:01 2026 GMT
            Not After : Nov 17 03:21:01 2026 GMT
        Subject: CN=6af9251e-c016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9a:00:b7:07:04:ea:b1:5c:db:2e:b2:29:17:
                    06:ef:2f:5e:a6:f2:12:3e:0a:9a:0a:ad:fa:67:77:
                    c0:24:87:02:07:29:48:16:78:bc:2d:88:7c:7e:c0:
                    dc:67:51:40:08:b1:07:78:5e:0b:4d:e6:e3:86:5c:
                    dd:ee:12:1d:a3:c7:4e:7e:82:bd:fc:31:5f:fd:e1:
                    a7:27:06:7f:07:74:89:52:9f:f7:1a:18:a8:27:e8:
                    14:ef:59:c0:41:1e:1a:03:97:32:4d:8a:54:44:bd:
                    54:0a:a8:9e:5b:f0:d9:f4:96:43:ac:da:49:8a:b4:
                    71:03:bf:c3:8e:92:7b:c9:f7:4d:ce:f8:a9:22:4b:
                    44:1d:ab:98:54:03:91:23:53:81:42:04:5d:cf:a1:
                    85:d0:58:0c:00:f7:06:e6:4b:af:d9:5e:8e:43:05:
                    b7:30:fe:89:dc:75:0c:3e:b6:df:90:5a:af:49:82:
                    8e:3c:05:f8:a2:28:8e:9b:04:fa:a3:50:18:5c:60:
                    23:51:d7:da:49:7e:4d:93:82:e3:61:26:42:a1:37:
                    99:b6:a1:9f:e8:99:ce:95:e5:73:da:68:fd:34:a8:
                    6e:1f:d4:df:f1:16:8b:8c:9e:1c:a6:08:18:8f:50:
                    c8:76:31:42:c9:4f:03:65:bd:18:e6:ea:73:c5:60:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:77:F4:D3:77:52:DE:BC:71:5D:C3:2E:06:90:F0:D4:DA:8C:E7:5C
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ac:66:c8:ac:86:34:49:87:95:76:ec:64:ca:e4:2e:2b:23:
         93:35:20:f3:0a:2a:22:97:c2:2e:14:9b:fc:11:08:e5:86:aa:
         78:3c:90:27:f8:45:d6:22:3d:5d:6a:06:f7:89:af:28:43:de:
         b1:f2:5a:e3:23:b5:b5:a1:7f:aa:5f:8b:5f:df:f8:7e:bc:d2:
         05:0f:c3:b4:cb:6c:23:75:e9:6c:c6:81:0b:1a:56:1a:2e:72:
         ea:f5:fb:7f:28:33:b4:bb:f1:a9:7a:ae:4b:77:b6:2e:12:81:
         99:59:02:e7:8d:48:97:c0:f6:d5:e3:89:4e:9d:2a:25:1c:73:
         f0:27:6b:2c:21:0d:5f:fc:dd:44:c3:7d:82:9b:7a:74:7c:87:
         d0:1b:81:ce:1b:4b:d5:16:2f:6b:34:b5:c1:b0:23:a6:33:5a:
         06:39:be:15:da:e1:63:17:fb:f7:94:61:fd:f6:d5:af:9a:fc:
         82:86:a3:75:9f:43:b3:51:3a:b8:ae:a8:de:72:37:ae:12:db:
         11:5b:14:91:f2:a6:bd:fc:b7:6e:f5:3c:04:93:7c:3a:96:09:
         5a:4c:f4:6a:d7:f8:b2:2b:f0:76:44:f8:19:e9:30:8e:85:85:
         45:23:6a:c1:f6:5a:16:74:f7:ea:c9:d7:59:63:0a:73:03:10:
         e6:a8:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:36:45 2026 by rpki-client