Error: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer: certificate revoked on Tue 22 Sep 2026 12:32:29 +0000

Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          zC4a/GJPQT4gnSUIwBMT+h6pK1hlaHGJrFsi5C+dwz8=
Subject key identifier:   B3:69:71:76:D3:49:81:20:21:ED:D2:4B:90:AD:3E:E8:DD:2A:07:F9
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          013B
Signing time:             Mon 21 Sep 2026 05:32:23 +0000
Manifest this update:     Mon 21 Sep 2026 05:32:22 +0000
Manifest next update:     Mon 28 Sep 2026 05:32:22 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: F2QYrKzO8mqFKQUi7nBmisUigIsfhxgmnZrGHNnAp0c=)
                          2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
                          3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Sep 21 05:32:22 2026 GMT
            Not After : Sep 28 05:32:22 2026 GMT
        Subject: CN=6ab0c166-99c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:7f:82:0f:5e:8a:1e:ec:ff:48:ec:69:f6:
                    ca:76:28:60:8e:4b:a7:fe:44:ba:e4:61:d9:33:41:
                    25:ea:d6:3f:08:a6:ab:d1:59:8a:fc:0e:54:96:b2:
                    30:2c:47:65:72:e1:b2:eb:97:33:3a:bb:7d:24:11:
                    ba:95:f6:a5:5e:17:6e:ba:0a:1e:41:9c:d0:81:28:
                    c6:0a:05:6f:29:4f:5c:af:62:46:e8:2a:fd:8f:87:
                    08:0f:4b:6b:9b:89:6a:e1:d1:b4:e5:1c:0e:37:26:
                    c4:e2:f1:52:3f:af:0a:89:78:39:42:ab:1a:60:b0:
                    54:f6:d2:e1:07:35:49:41:cc:57:b7:bd:93:c0:ff:
                    53:f6:ce:6d:71:af:37:6d:43:36:14:f8:ce:15:fc:
                    a8:08:87:95:ab:dc:34:5b:7f:9e:d3:af:8d:19:35:
                    ad:94:fa:c7:55:36:34:cb:cd:f6:ed:c7:b9:b4:41:
                    4b:da:19:fd:ee:48:92:60:91:0c:10:a6:da:86:db:
                    d4:77:af:69:fb:a7:12:30:c0:a8:9b:11:a9:5b:d6:
                    2c:d5:be:23:04:0f:4d:e1:37:b5:0d:65:a2:a9:88:
                    3c:f3:ae:a4:0c:f5:80:5d:44:fb:dc:0a:ae:09:7e:
                    94:2b:24:34:c4:0d:5f:af:18:04:ee:bb:13:56:a0:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:69:71:76:D3:49:81:20:21:ED:D2:4B:90:AD:3E:E8:DD:2A:07:F9
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:17:9d:40:97:7f:45:13:e8:69:76:6b:9b:35:4e:59:1f:7d:
         9b:2c:81:46:17:9e:b4:f7:b8:a2:ff:a2:1a:93:31:88:2f:63:
         51:39:b9:fd:8f:3a:31:5c:35:a6:50:cb:ea:aa:4c:90:1f:1e:
         16:d8:7a:1d:cb:4a:c6:9b:44:c1:4d:62:42:7a:c5:53:8a:70:
         fd:ee:44:11:d8:ff:1c:61:6c:10:8f:24:f5:b6:f6:08:c5:a2:
         53:03:7d:9c:9c:d3:42:13:9e:4d:1a:e2:87:f8:74:d2:5c:17:
         7f:2f:ae:fd:be:d5:13:8a:80:2b:e6:20:3d:2a:67:d4:9e:ec:
         74:14:77:4b:48:fa:4a:c9:a7:1e:47:26:a0:e8:cb:bc:95:d8:
         61:89:93:07:68:f9:2f:89:20:3e:a3:bf:03:fc:24:89:ad:ba:
         02:b3:d7:7f:16:8f:17:8d:09:47:95:8d:84:ee:31:2d:c2:15:
         79:20:57:05:aa:1d:d3:e1:44:d6:52:9d:2f:59:6a:01:85:b8:
         52:33:60:84:5f:7f:10:ae:43:bc:73:d1:4f:96:ee:03:ba:f9:
         4d:48:1f:b3:c0:92:17:f8:3b:9b:45:ae:08:01:cb:89:7e:08:
         80:bf:0d:d0:53:89:51:93:ef:3d:b1:0e:82:51:ac:dd:5e:a4:
         d6:06:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:40:53 2026 by rpki-client