Byron,
Thanks for providing the details of what APNIC does. Those are
precisely the sort of
checks I would hope for.
I agree that if APNIC had IANA as its parent, then the issue you cited
would be relevant, i.e.,
you can't know if IANA issued a new cert that removed an INR from your
cert, which could result
in invalidating the whole APNIC cert. Of course, today, this is not an
issue, because all RIRs
represent themselves as trust anchors.
Steve
_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr
