Error: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer: certificate revoked on Tue 22 Sep 2026 14:05:38 +0000

Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
File:                     5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json)
Hash identifier:          7n+c10HrcJMGGiyyxlgyCtHXS1P4UHKdADSxiL3Fbbs=
Subject key identifier:   80:A4:27:CC:94:0D:4F:0B:A9:CC:10:A0:F5:B2:EF:6B:4D:D3:A8:F0
Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Certificate issuer:       /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Certificate serial:       0DB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
Manifest number:          0DA1
Signing time:             Tue 22 Sep 2026 03:35:28 +0000
Manifest this update:     Tue 22 Sep 2026 03:35:28 +0000
Manifest next update:     Tue 29 Sep 2026 03:35:28 +0000
Files and hashes:         1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: vZ3t5vwbYTIycXf49C/phR34dlCtHJeLLjOUY1ERsOQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3508 (0xdb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
        Validity
            Not Before: Sep 22 03:35:28 2026 GMT
            Not After : Sep 29 03:35:28 2026 GMT
        Subject: CN=6ab1f780-baf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:8a:8b:93:e2:69:85:1e:ad:5f:7b:a1:c1:
                    37:4e:d7:2f:67:d1:32:67:f3:71:0b:aa:53:6f:9e:
                    bc:f3:d7:0d:b6:ba:c1:7e:69:7d:c6:e3:fa:55:c2:
                    c6:d0:3a:c1:0d:64:10:d6:e8:94:b2:cc:32:c3:be:
                    c0:d5:9e:8c:56:00:06:e7:fd:a6:ba:b0:08:e7:b1:
                    91:1f:1b:7b:c2:97:9b:d7:4f:6d:57:b8:f9:6e:d4:
                    60:40:6e:dd:65:6c:80:b9:79:5d:a3:1e:89:94:0f:
                    e0:19:d4:06:b0:be:2e:c7:c9:93:19:8f:25:ef:a0:
                    3a:23:18:d2:df:00:29:58:56:5f:bd:4e:f3:20:c6:
                    f7:24:4b:1d:13:b7:65:a4:dd:a6:cc:fc:20:14:1a:
                    34:5e:d4:a2:b1:ab:3d:68:d7:13:d0:b6:83:21:ba:
                    5d:37:e5:86:c0:3d:6b:f0:55:f7:96:11:da:be:1e:
                    f8:8b:fa:87:02:82:4c:31:9c:62:de:2a:64:b8:36:
                    e4:77:ce:5f:52:d9:e3:31:00:0e:5b:17:69:32:e1:
                    2e:25:32:7a:ea:0f:de:dd:36:e7:5c:d0:ee:c6:ce:
                    ca:77:ed:ce:17:16:80:1d:39:1e:62:66:66:54:b3:
                    80:1b:7c:05:0f:35:c7:f8:83:43:8a:b5:6b:99:13:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A4:27:CC:94:0D:4F:0B:A9:CC:10:A0:F5:B2:EF:6B:4D:D3:A8:F0
            X509v3 Authority Key Identifier:
                keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:7e:1f:e5:05:d3:68:b5:d5:07:6e:f1:9d:c5:60:3a:9d:
         41:2a:21:17:b7:20:bb:09:d9:06:a2:53:49:03:3f:b6:cf:33:
         a0:4a:3b:a9:84:b5:59:78:f7:fb:18:d4:fe:71:4f:c4:f7:98:
         62:c7:d6:cb:44:cf:3e:2a:20:b9:a2:05:3a:5b:b9:69:ad:ed:
         fb:00:dd:b6:10:43:c3:b9:86:b8:ef:32:5c:f3:f1:a5:87:9a:
         a7:ec:b0:c5:18:2f:db:6b:5d:65:b3:c5:a1:02:53:82:e3:19:
         33:f9:04:8e:28:b8:2c:c0:11:88:17:2d:be:c5:9d:3d:03:31:
         86:c9:62:a6:08:ce:97:00:d5:85:29:49:f9:df:3b:36:15:e8:
         5d:ef:ff:14:b0:94:cd:16:f0:64:00:57:a4:72:89:d7:ff:bf:
         0d:bb:b5:f3:39:f6:c6:48:90:08:6c:17:82:84:ac:e8:05:8a:
         ee:5a:73:60:08:ef:29:8d:2d:b2:6d:e9:30:88:97:af:61:e3:
         4d:95:99:cb:8e:fe:16:ed:ea:1b:76:a5:09:7a:1d:84:77:40:
         0b:c4:93:94:a9:12:5a:2d:84:ac:aa:ee:e8:a6:90:9c:3b:50:
         92:64:d5:05:e1:50:96:f2:db:2a:29:7b:9e:72:b5:1a:ec:eb:
         c8:71:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:56:17 2026 by rpki-client