________________________________________________________________________
Updating RPKI Trust Anchor Configuration
________________________________________________________________________
APNIC has completed the process of transitioning from its previous
Resource Public Key Infrastructure (RPKI) trust anchor arrangement to a
new single trust anchor configuration. Each RIR will publish an 'all
resources' global trust anchor, under which its own regional resources
(IP addresses and ASNs) will be certified.
What do I need to do?
---------------------
If you are registering ROAs via MyAPNIC or the RPKI provisioning
protocol, the process is unchanged and you do not need to make any
changes. Existing ROAs will not be affected by the transition either.
If you are using relying-party software, such as the Dragon Research
Labs RPKI Toolkit or the RIPE NCC's RPKI Validator, you are advised to
update your software's configuration to use only the current APNIC trust
anchor, rather than the five APNIC trust anchors that were previously in
use.
Note: this update is not critical. However, if it is not done, the
software will log or report warnings about being unable to retrieve the
trust anchors that are no longer being used.
For more information, please visit:
https://blog.apnic.net/2018/02/27/updating-rpki-trust-anchor-configuration
________________________________________________________________________
APNIC Secretariat secretariat@apnic.net
Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100
PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199
6 Cordelia Street, South Brisbane, QLD http://www.apnic.net
________________________________________________________________________
