Error: rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
File:                     SrMCua__mu6hm1ArhuhUdBElsCs.mft (raw, json)
Hash identifier:          1T/WXFcO7ASNO3GcF56Tbj3SvhCwjegIKvLUgmcNrpY=
Subject key identifier:   87:4E:9B:61:43:71:F4:5F:EB:E8:A9:6F:2C:4B:82:C9:9B:9C:BF:99
Authority key identifier: 4A:B3:02:B9:AF:FF:9A:EE:A1:9B:50:2B:86:E8:54:74:11:25:B0:2B
Certificate issuer:       /CN=F36B1EAFAF/serialNumber=4AB302B9AFFF9AEEA19B502B86E854741125B02B
Certificate serial:       5E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SrMCua__mu6hm1ArhuhUdBElsCs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
Manifest number:          5E
Signing time:             Sun 15 Nov 2026 05:47:52 +0000
Manifest this update:     Sun 15 Nov 2026 05:47:52 +0000
Manifest next update:     Tue 17 Nov 2026 05:47:52 +0000
Files and hashes:         1: SrMCua__mu6hm1ArhuhUdBElsCs.crl (hash: Gt6On41DFTAZd1yTuaiTpqV4KLNl/2JwpLjTon45gsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SrMCua__mu6hm1ArhuhUdBElsCs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EAFAF, serialNumber=4AB302B9AFFF9AEEA19B502B86E854741125B02B
        Validity
            Not Before: Nov 15 05:47:52 2026 GMT
            Not After : Nov 17 05:47:52 2026 GMT
        Subject: CN=6af94788-e48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:8f:d6:52:b9:7a:f7:d5:ff:4f:53:83:f5:
                    9a:b7:96:7f:eb:c4:67:3d:ca:98:77:74:31:ae:49:
                    d4:e2:37:e9:d0:43:b6:6b:f1:97:3d:32:08:8c:8d:
                    1b:3e:40:ee:60:50:78:02:a7:3d:d9:fb:d5:f6:f6:
                    11:af:5d:35:9a:7e:4f:69:e6:58:d2:83:6a:e8:f7:
                    17:b8:b8:df:e8:bd:50:ed:c2:e4:03:be:54:58:32:
                    6c:fb:c6:8d:8b:f8:62:ec:60:73:62:90:84:8a:43:
                    50:16:8f:80:20:2a:49:ae:2f:0e:be:8e:55:23:61:
                    ab:ba:d8:b9:40:be:28:a8:aa:e4:2a:ef:dc:01:40:
                    98:f5:35:db:da:3f:45:b6:10:2d:b7:86:08:7a:6f:
                    28:a7:64:d6:a4:bb:9b:a3:3e:f1:76:f8:75:5d:e8:
                    60:ee:44:b7:a6:30:02:23:a9:85:a5:ed:8b:47:f7:
                    70:26:d8:35:09:a3:bc:8c:af:5a:de:fb:ca:ef:46:
                    7e:01:53:b2:0d:20:4e:2d:1f:28:31:d1:94:d1:af:
                    ae:ea:d2:1a:6d:b0:2c:8c:86:9a:6d:23:79:2a:8c:
                    96:88:c5:e3:8e:96:e6:5b:d8:21:d1:cc:4e:df:25:
                    73:40:c8:54:5c:65:01:74:33:cb:a3:11:ce:ab:86:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:9B:61:43:71:F4:5F:EB:E8:A9:6F:2C:4B:82:C9:9B:9C:BF:99
            X509v3 Authority Key Identifier:
                keyid:4A:B3:02:B9:AF:FF:9A:EE:A1:9B:50:2B:86:E8:54:74:11:25:B0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SrMCua__mu6hm1ArhuhUdBElsCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:d2:39:ea:41:99:9f:c6:b8:7e:1f:b2:f8:f5:43:92:0f:
         e7:48:f4:08:a5:f0:a0:dd:47:55:fc:d0:83:54:9e:17:a9:5a:
         c5:fd:66:be:f7:f7:ea:e5:44:bb:c8:52:dc:f5:1d:79:49:af:
         95:d4:82:66:03:01:ed:23:ea:5f:0a:20:0d:a0:55:f5:46:34:
         b2:91:f8:cc:01:58:8a:47:d3:b8:5a:3e:f3:37:13:24:00:96:
         12:9b:ce:df:32:eb:f0:0d:51:3a:2c:7a:77:a9:d1:5e:48:04:
         8e:b8:b5:96:34:c0:2b:36:a8:8c:8b:5c:29:bb:bb:b5:7e:b3:
         65:df:ac:3f:3b:ba:88:2a:9a:92:62:3a:53:6d:30:71:b8:91:
         87:55:5f:dd:bc:d5:18:7e:22:72:94:34:61:23:da:c1:d5:e3:
         11:c0:fe:df:e2:f0:1c:80:4a:24:90:c8:fe:3f:f5:ff:6d:6b:
         68:10:39:9a:f6:fd:87:7b:ca:28:e2:ad:9d:9d:45:80:9f:10:
         c2:01:6e:ba:d4:54:da:ed:e9:4c:1c:99:7d:98:ae:7d:ca:f5:
         8f:1d:86:85:30:41:10:dd:fc:ce:1e:db:a8:de:07:0a:9a:2e:
         a9:47:af:f7:42:49:8c:8a:5c:19:2a:08:a3:11:02:bd:66:ff:
         fc:84:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:45 2026 by rpki-client