RSCs are now supported in MyAPNIC

MyAPNIC now supports RPKI Signed Checklists (RSCs), providing Members with a new way to cryptographically sign and verify documents using their RPKI resources.

Defined in RFC 9323, RSCs allow an APNIC account holder to sign arbitrary files or documents using an RPKI certificate associated with specific IP address ranges and/or Autonomous System Numbers (ASNs). The result is an RSC object containing a verifiable digital signature.

Once generated, the RSC object can be shared with third parties, who can independently validate that the document was signed by the legitimate holder of the referenced IP addresses or ASNs using standard RPKI validation. This capability supports a range of operational and business use cases, including Bring Your Own IP (BYOIP) and other scenarios where proof of resource authority is required.

Verification of RSC objects can be performed locally using rpki-client or via APNIC's public online verification service.

APNIC welcomes feedback on this new functionality. Private feedback can be sent to [email protected], while public discussion is encouraged on the
apnic-services mailing list.

The views expressed by the authors of this blog are their own and do not necessarily reflect the views of APNIC. Please note a Code of Conduct applies to this blog.