1 https://conference.apnic.net/46/program/schedule/#/day/8/amm -1 DISCLAIMER: While every effort is made to capture a live speaker's words, it is possible at times that the transcript contains some errors or mistranslations. APNIC and Lloyd Michaux apologises for any inconvenience, but accepts no liability for any event or action resulting from the transcripts. ************ >>Sunny Chendi: Good afternoon and welcome back, everyone. Before we start the APNIC Member Meeting and I hand over to the chairman, Gaurab Upadhayaia, I would just like to inform about the closing dinner tonight, so you get heads-up information, what to do. The closing dinner is a bit tricky tonight. After we finish here, we go to the hotel just next to this one, Chateau Royal, the drinks and everything happens there, but then for the dinner, we actually go to the Duck Island. If you would like to go back to your hotel and change your clothes, maybe a bit more casual, specially we suggest that you bring a jacket, it might be cold on Duck Island and also wear comfortable shoes, it could be that when you go off the ramp, you may have to walk a little while in the water to go to the beach, 2 to the island side, so don't wear fancy shoes that may get wet and you may not be able to use them again. Those who are catching the 1 am flight out of New Caledonia early morning, we suggest that you take the first taxi to go to the island and come back immediately to Chateau Royal and go back to your hotels to take the airport transfers. Our staff, APNIC staff and OPT staff will be there to guide you. If you're one of those who are taking the 1 am flight, please come and see us and we can help you to get on the first taxi, so you have your dinner and come back quickly and go to the airport. Thank you very much now and I'll hand over to the chairman of APNIC Executive Council, Gaurab Upadhaya. He's not in the room, but you can see him on the screen here. Thank you. >>Gaurab Raj Upadhaya: Thank you, Sunny. I'm Gaurab Upadhaya, I'm the chairman of APNIC Executive Council. As I said in my opening, I'm not there because we wanted to test how remote participation works, or at least that's the story I'm sticking with. Having said that, welcome to the AMM. We hold the AMM twice a year, both times at the APNIC meeting. Of course the first one is always during APRICOT, the last event at APRICOT is the APNIC Members Meeting and we 3 hold this year also at the end of the APNIC conference in the middle of the year. It's pretty straightforward today. We don't have a lot of -- well, we have a lot of things, but we also don't have any complicated topics today. But before we start the formal proceedings, I would like to go around and introduce our Executive Council. As I said, I'm Gaurab Upadhaya, I'm from Nepal. I work for AWS and I am the chair of the Executive Council. Today actually just not me, we have two more EC members who are doing remote testing of participation. So I'll move on next to Rajesh, who is the secretary of the board. >>Rajesh Chharia: I'm Rajesh Chharia, secretary of the APNIC board. I'm also the president of the ISP Association of India and director of National Internet Exchange of India. This is the first time when I'm attending the APNIC remote and I think this is the right way of using the internet in a proper way. Thank you very much. >>Izumi Okutani: Hello, everyone. This is Izumi Okutani attending remotely from Tokyo. Apologies that I cannot make it on site, but as Rajesh has mentioned, the remote participation is working very well and good to see discussions going on at the meeting. 4 >>Gaurab Raj Upadhaya: Now we can go on the folks who are actually there. >>Kenny Huang: Good afternoon, Kenny Huang, APNIC Executive Council member and treasurer, and I'm also the CEO of TWNIC from Taiwan. It's nice to see you during the AMM. Thank you. >>Jessica Shen: Good afternoon, I'm Jessica Shen from China. I'm APNIC EC member and I work for China Network Information Centre. Thank you. >>Benyamin Naibaho: Hi, everyone, my name is Benyamin Naibaho. I'm from Indonesia. Currently my position is head of Indonesia Internet Exchange and Data centre, and Indonesia Association, APJII. Thank you. >>Kams Yeung: Hello, my name is Kams Yeung. I'm from Hong Kong. I'm an architect from Akamai. Thank you. >>Paul Wilson: I'm Paul Wilson the head of APNIC and I'm also a member of the EC by virtue of that position. Thanks. >>Gaurab Raj Upadhaya: Thank you, everyone. Thank you fellow EC members on the EC. Rajesh is the secretary of the Executive Council and Kenny is our treasurer. As in my opening remarks, I would like to basically thank everyone who is here, thanks to all our other participants and chairs and everyone. One of the things that I would like to raise or like to talk to the 5 community about is the survey reports will be presented at the and of this session and hopefully you'll have a productive discussion about the results during the break, but we would also like to invite our community members, stakeholders to engage with the EC, the staff, the SIG chairs at any other time, whether they see us here at the meeting or they see us at a completely different environment or context, so we can get some more ongoing feedback. That's true with a lot of new participants, please stay, please join the mailing list and continue to participate. Having said, that I will start the AMM with the Secretariat report from Paul. >>Paul Wilson: Thank you very much, Gaurab. Thanks, everyone. So I've got a Secretariat report here which talks about the things that we have done mostly since the last meeting in March, but it also generally covers what we have done in many senses for the whole year of 2018 so far. APNIC's mission statement -- you know it, a global open stable and secure internet that serves the entire Asia Pacific community. We report on the activities under that mission in terms of serving members, 6 supporting regional internet development and cooperating with the global internet community. I'll be covering each of those three topics in turn. Firstly, serving APNIC members. The APNIC membership is continuing to grow. We have just crossed 7,000 direct members of APNIC. In addition, we serve indirectly something just over 8,000 through the National Internet Registries. By our current projections towards the end of the year, we'll be at about 15,500 organisations served by APNIC directly or via NIRs. So the membership growth is continuing quite strongly and we don't see an immediate end to that in the next couple of years at least. In the interests of time, I have compressed delegation slides here on to one screen, but this shows you IPv4 and IPv6 delegations at the top, ASN delegations and then IPv4 transfers at the bottom right. So the last year we had a fair drop on many activities over previous years, perhaps the IPv4 delegations are related to the changes in policy which took away a little bit of the incentive for a number of member organisations or organisations to join APNIC for the sake of taking addresses that they might have then transferred. But at the same time, v6 was down a little, ASNs 7 were down a little. We are recovering in terms of numeric projections through to the end of the year. The one that is continuing to increase in activity year by year is of course v4 transfers, we actually under-predicted these in terms of budgeting for this year, so it's a little bit higher than expected, but we can see quite a nice linear growth straight up with IPv4 transfers and I guess we will be assuming that trend continues. We're tracking resource holdings across the membership. This sort of set of intersecting circles shows you the number of members, proportion of members holding ASN, IPv4 and IPv6 resources. The big thing here I guess is we have 96% of the members holding IPv4. We have 60% of members holding IPv6 and that's been claiming fairly steadily as I'll show you shortly. Resource certification. We are still trying to get people "Ready to ROA". ROA being the route origin authentication or authorisation object in the RPKI. Across the RPKI system, we can count the number of members who have certificates, the number who have ROAs, the amount of IPv4 address space under ROAs and the amount of IPv6, and I think approximately 1% growth in membership with CERTs and ROAs, 1.7% growth of IPv4, we are still sitting at only 5% of IPv4 space under ROAs, 8 so that's got quite a long way to go and we are continuing to get people "Ready to ROA", we hope. MyAPNIC. Quite a bit of work going on these days on performance improvements, which have been a bit of an ongoing problem, but we have got a real campaign of activities under there and achieving, as you might have seen, some real improvements in recent months. But under development also by the end of this year, contact update tools, contact validations, annual review, reminders, these are all things towards the improving the completeness and quality of Whois data. Also SSO, single sign-on, and possibly we are proposing the deprecation of certification or digital certificates for access to MyAPNIC. Anyone who is keen to hear that, who's happy to hear that could give us a round of applause if you like. The certificate system has been a bit of a headache over the years and we are proposing to deprecate it soon enough. All of this was demonstrated during this week. We have training and technical assistance activities going full on, as usual, 41 trainings so far this year in 25 economies, 1,331 trainees. We have community trainers coming on board, we have eLearning sessions and training videos and all of that is going pretty rapidly in the upward direction, in terms of volume. 9 One thing you might have heard this week as well is about the APNIC Academy. I think we are having a prize draw at some point for those who have signed up to the academy. That's been relaunched on a new platform, it has an APNIC curriculum now. It includes three free courses on internet resource management, on security and on routing with several more APNIC courses to go. It also APNIC Labs, that is virtual labs on that system, it also has an amount of content which comes from other places, so we are carrying content on behalf of others including, for instance, the ISOC MANRS, the mutually agreed norms for routing security training. Since that has been relaunched we 758 enrollments and 647 people certified. You might have heard a little bit this week about product management which is a new approach that we have adopted at APNIC for developing systems and services in a more organised fashion. We have a few steps and processes that you'll get to hear about and come to get used to as we keep on developing and carrying out this system. It is a workflow that starts with an idea and problem validation, solution validation, production of a minimum viable product, then building, launching, operating and repeating that in an agile way. So we have actually started doing some validation of some 10 problems and solutions this week. You may have heard about it from Sofia, from Adam, who are product managers at APNIC these days. Thanks to all of you who helped with that, because it is the way that we want to make sure that APNIC product development things, like registry products and information products stay up with your expectations and needs. Internally, there is quite a bit of infrastructure work going on. We restructured a little bit. So the infrastructure is now under Che-Hoo's management, as the director of development and infrastructure. They're doing work on internal config management, patch management, hardware security, consolidating the network with more multihoming and peering, peering with AARNet, et cetera. Some of these things will help with the MyAPNIC performance issues. We have also done the right thing by liberating a /23 from the APNIC office network and returning it to the IPv4 recovered pool, so we are using private addresses, ... type, RFC 1918 addresses in the APNIC office these days. The APNIC survey is something that you'll hear about in a few minutes, a little bit more later today. It's something that we have done every two years since 1999. It's commissioned by the APNIC EC, as a formal, 11 independent, anonymous survey, and it forms the major input into APNIC staff-level, Secretariat planning, and EC planning. As we go into another four-year strategic plan which will be developed next year, then we'll have a new set of inputs from the member and stakeholder survey. Thanks to all of you who responded. I won't steal any of Brenda's thunder, she's going to be presenting this to us in a little while. Moving on from serving members to supporting regional internet development, we regard policy as part of that, because the policy development process is something that serves and includes others outside of the APNIC membership. You have probably heard about all of this, but in summary, we have had three policy proposals current this week and they will be reported on later on today. We have had three returned by the author. That's not a bad amount of activity in the policy process at the moment. The thing is what, we're doing, and this actually comes from the survey that was conducted back in 2016, is increasing the outreach and sort of engagement with the APNIC community on the policy process. So things like updating the web content, holding webinars and presentations at NOG meetings and NIR meetings, translating policy summaries and outcomes, we had a mock 12 Policy SIG which is kind of a practice run particularly for newcomers, and there's quite a bit of policy on the blog, but there's also going to be a policy series on the blog coming up to actually talk about some real policy changes and the impacts of those. We are trying to inspire some more understanding and interest in participating in the policy process. A lot of community activities. We see NOGs, the Network Operator Groups, as probably the most important type of meeting or gathering of the community that APNIC staff can go to, can support, can use to meet members and improve services as we need, understand the community and so forth. 16 NOGs in the last period since the beginning of the year. Root servers. We are still working on those as needed, a couple of F-Root installations and changes recently. K-Root, we collaborate with RIPE NCC, and Axel, the general manager is here, we collaborate on K-Root deployment as well. We have had a few MOUs, Cloudflare on 1.1.1 research project with CAICT in China, ISOC on MANRS, the mutually agreed norms for routing security, so thanks to Aftab from ISOC for working with us on that. Work on IXPs which are an important service and an important piece of infrastructure for APNIC members. 13 Work on IXPs in Vietnam, Myanmar, PNG, Mongolia, working also with the IXP-DB with APIX and with the Peering Asia people, and Peering Asia is a new meeting that's coming up again in Hong Kong quite shortly for supporting the peering community. We are sponsoring various different regional events, but also the NOGs, so 15 NOGs have received sponsorship this year, financial sponsorship from APNIC. And we are also doing more outreach to the research and education community, APAN in particular, with GEANT, and others, MYREN is one where we have had some training this year, connecting with AARNET in Australia as well. Security something we have heard quite a bit about this week. It is something that if we track security through the APNIC member surveys, we can see that security is now at the top of the list and only getting higher. That's sort of new in the last few years. Before that, we used to see IPv6 as the biggest challenge. IPv6 is still up there, but security is really escalating quickly. We are responding to that as much as you want us to. We have got dedicated full-time security staff, training, reaching out to LEAs, to CERTs, conducting eLearning on security topics, engaging with FIRST, with APAN on security topics, with PITA, with APEC-TEL, and 14 others on security, in particular infrastructure security, the kind of security, routing security, DNS security, et cetera, that concerns the APNIC membership and community. Adli is still on the board of FIRST. We have new security papers on the website. We have had 53 security related blog posts this year. Something that's particularly important and I'm particularly proud of, as I have said, here in the Pacific is the work that's been done in support of new CERTs. The CERT in Tonga in 2016, but then two more this year in PNG and Vanuatu were launched in January and June. That's with help from APNIC to get moving on an inclusive community process, where the members of the affected communities of the CERT at the national level can come together and understand what the CERT is all about and support some of its conduct, but then also technical training and mentoring and technical support for the CERT staff. That's something that's ongoing. We have had two regional workshops, one in Tonga earlier in the year and one here in New Caledonia as part of the training in security in APNIC 46, and collaborating with others around the region, we are still collaborating with the ITU, who are also interested in CERT development, and trying to keep things well co-ordinated across that. This is something 15 that APNIC would have been doing already. In fact, we started work in Tonga and then subsequently received some funding through the APNIC Foundation that allowed us to accelerate that work, particularly in PNG, Vanuatu and beyond. I'll have a little bit more about the Foundation in a couple of minutes. Data services. This is one class of products that we are now managing under the product management framework and Sofia was talking about it earlier this week. We have had Birds of a Feather sessions at APNIC 45 and this week to try and understand more about community expectations for data services. This is something that also we have been asking about in the last couple of surveys. So we are improving the stats service. There is a service at stats.apnic.net and that's still the old service. The new one is shown here and it's going to be launched a bit later on in Q3, in the next month or so. We're looking at some other network security products which Sofia has been involved with problem testing this week, problem validation this week. IPv6. It is still, as I said, at least the second highest priority on our agenda. We are doing a lot of face-to-face training and eLearning sessions, doing 16 a lot of collaboration, still working with the ITU on an at least annual basis or more on security workshops for IPv6 and on direct country assistance. So presentations wherever we can to let people know about the status of IPv6 and if they still need to know the need for IPv6. We have been publishing deployment success stories, 28 of them now on the website, so you can actually see detailed deployment cases, and 47 blog posts this year. As I mentioned before, 60% of APNIC members now have IPv6 address space allocated to them. That's up from 50% at the beginning of the year. In case you're not tracking it, IPv6 capability has also been increasing from 7.5 to 16.5%. So that's a considerable increase in IPv6 capability. The blog I mentioned several times, it's very busy these days. We passed a million views during the last couple of months. We are getting an average of 40,000 per month these days. We are always looking for good guest blog posts, so anyone who's got a good hand at writing and sharing your experiences and particularly your technical knowledge about what you're dealing with, very welcome. We very much like to be able to use the blog to share that with the community. We have had a couple of conferences. We are at the second one this year. We had 752 people at the APRICOT 17 conference and we are very happy to see 305, at the latest count, here in Noumea, this time representing 46 economies, 92 member organisations, it's a fair bit down from APRICOT, but I think what is actually interesting and good to see here is that the remote participate were 71 at APRICOT, but 196 here, and we are heading for already a larger number of views on APRICOT. Fellows. 64 Fellows from 16 economies, but most of them, 80% of them, I think, from the Pacific, with the support of our generous sponsors this week. The APNIC Foundation is something I have mentioned a couple of times. It was established in 2016, so just over a year ago, about 18 months ago. The mission of the Foundation is to build APNIC's development programme. You may recall discussions about this in the past. APNIC has always been involved with internet development activities, training and technical assistance and these conferences for instance, and always funded that out of APNIC member fees. So as APNIC grew, that allocation grew, but we didn't grow as fast as the demand, so there's always been more demand for help around our region for internet development. The APNIC Foundation is a fundraising vehicle to allow us to do that. It has been pretty successful. So in 18 months, we have managed to raise about A$1.3 million in 18 funding commitments for a bunch of projects including some of those that you have heard about today, but they have been largely around security, CERTs, and one large project actually targets PNG in particular for upgrading and helping to develop network infrastructure this year which is the year of the APEC meeting. We had the first APNIC Foundation board meeting during this year. Three board members: Edward Tian from China, Sharad Sanghi from India, Sylvia Sumarlin from Indonesia attended and did some planning and had the first AGM and board meeting which was great. They approved this mission statement, which is based on the APNIC mission statement. This is about having a global, open, stable and secure internet that's affordable and accessible to the entire community. That's the sort of difference with APNIC's mission, is that the affordability and accessibility is what the foundation needs to work on. The ISIF, the Information Society Innovation Fund has been a longstanding project, in fact for the last 10 years, under APNIC and it's been moved to the Foundation now as a Foundation activity. It had its latest call for grants and awards this year. There were 236 nominations, but 10 grants and awards, eight grants and two awards were awarded, approved in network operations 19 research, which is funded by APNIC; cyber security funded by APNIC; community networks, funded by ISOC; and gender empowerment and innovation funded by our long-time partner, IDRC. Those haven't been announced yet, but the selection process and the due diligence and the contract is under way at the moment, so you'll hear more about that. ISIF Asia on its 10th year was recognised by the United Nations as a champion in international and regional cooperation. So Sylvia, who's been running ISIF for the last 10 years, I don't if Sylvia is in the room, but it's a fantastic achievement, 10 years of ISIF Asia, and receiving that award in March this year. Moving right along. We have been cooperating with the global internet community, APNIC Labs continues -- one of the really important jobs of APNIC Labs is the IPv6 measurements, you see that there, but it's available for you to browse around on labs.apnic.net. Lots of blog posts, presentations and detailed research topics being covered there. Global engagement continues. We have many different types of engagement around the world, some of which you know well, for instance ICANN in various ways, IETF. We also have regional bodies like the Asia Pacific Telecommunity, ASEAN, the regional office of the ITU in 20 this region, more and more security-related bodies, such as the GFCE, Global Forum on Cyber Expertise, FIRST as well, and of course internet governance, IGF who supported the Asia Pacific regional internet governance meeting which was for the first time in the Pacific just last month, in Vanuatu. We are continuing to collaborate closely with our RIR colleagues. So APNIC is the chair of the NRO this year -- that makes me the chair of the NRO EC, but we also have APNIC staff chairing coordination groups with other RIRs, the ECG, the engineering, the registration services communications, finance and other coordination groups. So we try to participate in each other's meetings, but we have also had quite a few staff exchanges, we are working with AFRINIC and LACNIC also on the Seed Alliance, which is an extension of ISIF. That's it. I have blown my time, but there you have it. Please stay in touch with APNIC through the blog and all of these social media channels which you can find on apnic.net/social. Thanks very much. >>Gaurab Raj Upadhaya: Thank you, Paul. As usual, we would like to think that the Secretariat is very well run and some of the achievements show the maturity of our organisation. And as Paul called out, special 21 congratulations to Sylvia and the ISIF grant programme. In fact, I knew Paul before his APNIC days when he was involved in something similar with IDRC. Then that programme died at some point because there was not enough people supporting it and then I'm so glad to see that it came back up with APNIC support and IDRC support and we have won an award for it. Having said that, thanks, Paul, for the excellent running of the organisation, but, you know, every organisation, the main thing is the finances, how we are doing and whether we are solvent and how our revenues and expenses are holding up. So I'll request Kenny Huang, treasurer of the APNIC Executive Council to present the financial report. >>Kenny Huang: Good afternoon. My name is Kenny Huang, APNIC treasurer and Executive Council member. I'm happy to give the treasurer's report today. As you know, APNIC is a non-profit organisation, but we still review all the APNIC financial detail from time to time to ensure APNIC financial capability can fulfil the requirement for future sustainable operation because APNIC being a critical function of the internet. So it goes with treasurer report. Basically, it is split into two part. First part is year to date, end of June 2018 financial report. Second 22 part is the year to date June 2018 activity reporting. So let's come to the first part. Until the end of June, June 30, membership growth below the budget, actually a little bit different, we have 405 members instead of budget 420 members, new member. Revenue is 26,000 below budget and expense is much lower below the budget, 923,000. Surplus 898,000 above budget. So basically all the financial pretty much match to what we budget last year. Here we come to the detail. Here operating surplus year to date until end of June 2018. Year to date, the operating surplus was AU$1,410,000. Forecast to the end of this year will be AU$769,221,000 operating surplus. The statement of income, that belongs to the revenue part. Year to date to the end of June this year, it will be AU$10,848,000. Until the end of this year, the forecast year 2018, that will be AU$22,185,000. Lastly, investment portfolio performance we have. Actually we get a pretty good investment portfolio performance. According to APNIC portfolio account, right now we have AU$23,341,000 here broken down into the different detail comparing with the benchmark and according to portfolio account performance. Membership growth we have so far. Most of our members actually still growing through the small 23 membership or very small membership. Year to date in year 2018, we have 3,164 small members, 2,897 very small members. You can see the distribution among our membership. The yellow colour stands for very small membership and the green area stands for small membership, so small and very small membership would be the majority of our membership structure. Membership movement by economy. You can see some significant growth from Australia and Bangladesh, a lot of new members join from Australia and Bangladesh. Also some small amount of member from China and Hong Kong. You can see the membership closure year to date until the end of June 2018. Blue colour stand for non-payment because we didn't get payment from member, that's why we close the account. Some of the members, they discontinue their business. That's for yellow one. Let's move to statement of income and expense part. Year to date until end of June 2018, the expense was AU$9,348,000. We forecast to the end of this year, the expenses would be AU$21,415,000. Expenses year to date, that was 923,000 below the budget, and we forecast that by the end of this year we will be 502,000 below budget. For capital expenditure, year to date until end of June 2018, that will be AU$256,000. We forecast that 24 at the end of this year will be 915,000, so most of capex will be moved to the end of this year. The statement of our financial position. So far we have financial position until end of June will be AU$29,368,000. We can see APNIC reserve, the majority of reserve is from financial asset and some reserve from property and some of them from cash. As I mentioned, review of the financial report is to understand how healthy the APNIC operation is and we still can see the very healthy operation in terms of financial requirement. And until now, year to date until end of June, we still have 16.66, that's the number of months of expense covered by the equity. So without any income we still can last for 16 months. Here we come to the second part, until end of year June 2018, activity report. Activity report is split into four categories. One is serving member, one is cooperation, one is international cooperation, the other is global cooperation and also member development. You can see the yellow colour and blue colour. Blue colour stands for year to date actual expense by different activity. That pretty much refer to what we budget last year and most of the expense goes to the serving the members, based on different category. 25 Year to date, in the total corporate expense will be AU$1,788,000. Global cooperation would be $817,000. Regional development would be AU$2,108,000. Serving members would be the major item, that's AU$4,724,000. Year to date until end of June 2018, capex by different activity. Total capex in terms of corporate will be AU$32,000. That's a very small amount of money. Also we don't have capex for global cooperation, no capex for regional development, and serving member would be capex AU$226,000. That's pretty much the end of my treasury report. If you want to go to detailed financial report, you can actually go to the apnic.net website /transparency to download all the detailed APNIC expense and activity report. That's the end of my presentation. Any questions? Thank you. APPLAUSE >>Gaurab Raj Upadhaya: Thank you, Kenny. We will have an open mic after the EC report, if you have any questions on the financials, we can talk about it then, but one of the primary things with the finance that the EC is always looking for is we have a target to get 18 months of operational budget as our reserves and that's what one of the focuses is to get to that point. 26 We had this question asked in the survey and I think we have overwhelming support to maintain our 24-month reserve. Having said that, we'll move on to the APNIC EC report and obviously I'll do the report on behalf of the Executive Council. You have met all of us. These are the Executive Council members. The EC members. Three of us are here on the screen and then the remaining are there on the stage. You have heard from all of us earlier. These are new photos. The APNIC EC's functions are determined by the APNIC bylaws. It's a pretty well defined set of responsibilities and functions. Primarily, other than Paul, all of the EC members are elected by the members and we represent the interest of the members in the governance of APNIC. We provide oversight of APNIC activities, we consider broad policy issues, and fit that into APNIC strategic directions. We set the membership fees. Once the policies are accepted by the community, we endorse them towards implementation. The APNIC EC meets four times a year. It's face-to-face meeting. A long time ago we used to have monthly calls and then determined that it was a lot more productive to meet face to face. We have had three 27 face-to-face meetings since the last AMM. The next meeting will be a joint board meeting with LACNIC in their office in Montevideo. All of our meeting minutes are public and so is the attendance, and there is quite a lot of other details about the Executive Council at that link there, apnic.net/ec. We have had perfect attendance record of all of our meetings so far. The main thing for the EC to report back to the AMM is the survey. Since the last AMM, the survey was conducted along with the focus group discussion. The survey is done by an independent third-party provider, Survey Matters, and you will hear from them soon. It is done independently of APNIC. We provide them inputs into the questions and inputs into what we are looking for. But beyond that, we don't have any access to the survey itself. Before the survey is done, we do have focus groups. The focus groups were conducted by Anne Lord, Dr John Earls and Brenda Mainland during early 2018, pretty much during APRICOT and just after that. The online survey itself was done in June and we had almost 1,241 respondents. Actually, we had 1,241 respondents. You'll have to go through the main survey to see the process by which we discarded a bunch of 28 incomplete responses, duplicates and so on and so forth. The survey will guide our decisions on our future priorities and developments and when we meet for the next EC face-to-face meeting, we are going to dedicate a full day in strategic planning for the coming years and the survey results form an important part of it. Once again, like I have said, earlier during the week, thank you everyone who participated and made this a big success. Finances, you just heard from Kenny, our treasurer. Our membership growth is in line with budget assumptions last year. We had almost 7,000 members at the end of July. In 2018, our operating surplus is forecast to be above budget, we continue to get more revenue, our expenses seems to be in control, and between the two of those, the surplus is growing. We have now started the activity and planning for the next year. In the EC process we start looking at next year's budget based on this year's and prior year performance and other things, like eventual run out of our last /8 and how that will impact revenue and growth and so on. Actually, by the end of this year, we'll have two-stage planning, one for next year and then our four-yearly planning cycle is coming to a full circle, so we'll start looking at the next four years or the 29 next five years as well by the and of this year. APNIC Foundation. Paul gave you a quick update on it. They had their first AGM and their board meeting. We have had Sylvia Sumarlin from Indonesia as the chair of the APNIC Foundation. We had the initial slate of board directors and then we have invited two more board directors who have confirmed and are being appointed. There are still some positions vacant on the board, but overall the Foundation is progressing pretty well, and the EC is pretty confident that they will meet its objective. The website of the Foundation is apnic.foundation, one of the new gTLDs. This is the APNIC Foundation board. During the first AGM and the strategic meeting, they had a strategic planning session and then have adopted a vision and mission statement. The vision is for them to have a global, open, stable and secure internet that is affordable and accessible to the entire Asia Pacific community. If you think you have heard this before, the APNIC vision statement is quite similar. Because Foundation follows from that, it is also tied into our own vision. The mission, of course, is more specific. The APNIC Foundation mission would be to increase investment in internet development in our region through education and training, human capacity building, 30 community development, research and related projects. The foundation has already accepted and achieved over AUD1 million funding in its first 18 months, from donors other than APNIC. APNIC is still funding the operation on the Foundation, but on itself, the Foundation has attracted funding from the government of Australia, New Zealand and Canada, along with the Asia Foundation and the Internet Society. And we hope we'll get more as the years go by. The EC always welcomes member feedback and, as I said in the opening of the AMM, not just the EC, but the entire APNIC leadership, the staff, folks who are selected into different positions, all of us keep looking for feedback from our members, especially if you have any feedback to the APNIC EC you can always submit it via MyAPNIC. There is a form there that says "Contact the EC", or you can just go and contact the EC from the APNIC website, and obviously during these face-to-face meetings. That is our URL there. There are a lot of other reports and activities, but I do have a special EC report today. You know, we just had an APNIC baby. Big congratulations to Izumi, our EC member, and Maz, that is why Izumi is not here. APPLAUSE We would like to congratulate both Maz and Izumi on 31 the new addition to the family. Congratulations. That was the EC report. Thank you, everyone. We will open the mic very quickly for a short Q&A if there are any questions on the reports so far. We'll have another open mic before the next tea break, but if there is any one or two quick questions, please come up to the mic, identify yourself and you can ask the questions or make a comment. If there is nothing, then we would like to -- it's almost time, like one minute left, before we need to announce the NRO NC election results. What I'll do is I'll invite the election chair, Perrine, to come on board and announce the results of the NRO NC and ASO AC elections that were conducted today. >>Perrine Dhalluin: Good afternoon. I'm happy to say the results are here with me and I'm happy to say that no disputes have been brought up. I would like to call on one of the scrutineers to make a comment on the vote count process before I announce the result. >>Nikolas Pediaditis: The process was conducted very smoothly and no anomalies were observed. >>Perrine Dhalluin: Thank you. The envelope is still sealed and I will open it. Total valid paper ballots, 83. 32 Total invalid paper ballots, 0. Total paper ballots counted, 83. Total onsite votes, 83. Total online votes, 98. Total votes counted 181. Total vote count for each nominee is combined online and onsite votes: Brajesh Jain, 98. Vicente Calag, 27. Tashi Phuntsho, 12. Solomon Wesley Sua, 6. Conie Borres Mercader, 6. Minh Lay, 6. Anwar Ahmed, 6. Manoj Adhikari, 3. Mohammed Mawdud Ahmed, 3. Mubashar Shahzad, 3. Mohammed Zakirul Islam, 3. Ahmad Nadeem, 2. Ahsan Habib Bhuiyan Rumi, 2. Mohammed Mahabub Ujjaman, 2. Jyuma Yamamoto, 1. Sanaullah Soomro, 1. The nominee who is successfully elected into the NRO Number Council is Brajesh Jain. Congratulations to 33 Brajesh. APPLAUSE >>Gaurab Raj Upadhaya: Congratulations to Brajesh Jain. Thank you very much for being our election chair, Perrine, for the NRO NC elections, and the scrutineers. >>Perrine Dhalluin: Thank you very much. I will now hand the result to the APNIC Director General, Paul Wilson. And to all the nominees, thank you very much for your running for the election. APPLAUSE >>Gaurab Raj Upadhaya: Thank you very much, once again, and congratulations to Mr Jain. You have been on the NRO NC for a few years and hopefully you can contribute more with your experience on to the NRO NC and the ASO AC. Now we will continue on with NRO business. Paul will do a report on the NRO EC. For those of you who have wondering, the NRO NC are the members elected from the different RIRs. The NRO EC is the Executive Council, which consists of the five CEOs of the different RIRs. Paul will report on NRO EC, because he's the current chair of the NRO. >>Paul Wilson: Thank you very much, Gaurab. This is a short update from the NRO. It's really an update about joint activities of all five RIRs. 34 The NRO here, the mission of the NRO is to be the flagship and global leader for collaborative internet number resource management as a central element of an open, stable and secure internet. So it includes the five RIRs, as we have mentioned. It was established in 2003 as a memorandum of understanding between the five RIRs. The mission in more detail is coordinating the RIR system and joint RIR activities; promoting the multistakeholder model and bottom-up policy development; and also fulfilling the role of the ICANN ASO -- we had some discussions this week, which some of you may have heard about, about the future of the ICANN ASO. We will be hearing more about that after lunch. The NRO is represented by an executive committee which is just the five RIR CEOs, including myself, Alan, who's not here, Axel Pawlik as treasurer, who is here, and Oscar and John from LACNIC and ARIN. The Secretariat is hosted by APNIC and we have one staff who's working at APNIC in that capacity, and that's German, and we have Susannah Gray working in Europe as well. We have coordination groups, which I mentioned before, for communication, engineering, registration services, and several informal coordination groups for 35 different aspects of joint activities of the RIRs. One of the important activities that the NRO has is to combine various statistics and data about the RIRs, so we have an internet number status report which provides global status on v4, v6 and ASNs. That is available online. It's updated quarterly. We have Stats, that's the raw format of the internet number resource statistical status, which is regularly updated, kept live. There's a comparative policy overview which means that if you're interested in how the different RIRs deal with particular policy issues, then there's a sort of matrix-style document that allows you to compare RIRs across a whole lot of different policy questions and issues, for instance, issues on RIR membership policy which was updated recently. And the Address Supporting Organisation has a website which the NRO is responsible for as one of our publications. The finances of the NRO are simply co-ordinated -- contributed by the RIRs. General operational expenses of US$643,000. That covers Secretariat and communication, travel and meetings. There's an IGF contribution of $200,000 and there's a contribution to ICANN of $823,000. That makes up a substantial 36 contribution which is shared amongst the RIRs according to the percentages that you see here. That formula is recalculated every year and it calculates our respective responsibility for NRO expenses according to our own individual budgets and IPv4 address holdings. That's how APNIC as one of the RIRs is given a 23.5% share of responsibility for the NRO budget. We got together a little while ago and made some pledges to a stability fund, so the RIR boards actually approved this action which provides a potential fund up to a couple of billion dollars US in case any RIR meets with sort of adverse circumstances requiring some financial assistance. That's really just a statement of our collective interest and dedication to making sure that the system globally continues to operate as it should. The IANA review committee is something that was formulated out of the recent IANA review, the recent IANA stewardship transition which resulted in the changes to ICANN's bylaws and so on, so alongside the Number Council, Address Council which you would have heard about, the review committee also comprises three members from each region, two elected by the community and one considered as an RIR staff representative, and that operates transparently with public minutes and 37 archives in review of IANA's services to the RIRs. There's 15 members in total and our members, with thanks, are Bertrand, Simon and George Kuo from APNIC staff. The ICANN empowered community is a new feature of ICANN as of the changed bylaws and the NRO has adopted a set of empowered community procedures that allow us to do things like approve and reject actions of the ICANN board, to remove directors to the ICANN board, and various related procedures, so if you're interested in that, it's on line. The other major activity in the last year has been the follow-up from the ASO review which, again, we are going to hear about later, but in background this review was conducted as part of our obligations under the agreement with ICANN. We have had now two reviews, the first was back in 2011 and this was the second. So you can find out all about that on the NRO website. What happened with the review report, which was released in August last year, is that we have had consideration, we have had a response to that report by the NRO EC and the ASO AC and in total, in sum, the recommendations of the report have all been accepted and that has resulted in what's been this ongoing process of community consultation on the ASO. It's quite a long 38 process, but we seem to be making progress towards some possible rethinking of ASO structure into the future. There are a few technical projects amongst the RIRs under the NRO banner as well. An important one has to do with the way the RPKI is administered globally. There was an announcement about this, but it's an announcement that is about the way that each of the five RIRs is handling an independent trust anchor for the entire IP and number space that we administer, the details are there. We are working actually on a new project as of this year which is on emergency back-up operations in case any RIR needs operational support or operational back-up in case of some problem, some operational catastrophe, I suppose, that might befall one of us. And that's to ensure that the RIRs, again collectively, back up and cover the services and obligations of an RIR that might be in trouble. Working on identifier technology health indicators with ICANN. There has been a consultation on that, which you may or may not have heard about, and some work on the NRO website and some other publications such as this new presentation item, which you may have also have noticed. Thank you very much. That's all from the NRO for 39 this time around. APPLAUSE >>Gaurab Raj Upadhaya: Thank you, Paul, for the NRO report. The next on the agenda would be the report on the APNIC 2018 survey results, and can I invite Brenda Mainland from Survey Matters to come and present the report. >>Brenda Mainland: Good afternoon, everybody. Thank you very much for inviting me to do this presentation today of the 2018 APNIC member and stakeholder surveys. I'll briefly talk to you about the methodology that we used this year and then I'll talk about service usage and satisfaction with the particular specific services that APNIC offer to members and stakeholders. Then we'll talk about the operational challenges that members have told us they're facing at the moment, and a little bit about governance and then time for questions. I won't be taking up too much of your time. As Paul and Gaurab said earlier, the survey is held every two years. We do some focus groups first. This year we did focus groups in 10 different economies and we ran five online focus groups. The online survey is a result of the outputs from those focus groups. We distributed the survey in June 2018 and it was 40 open for four weeks. Thank you to everybody who participated. We had 1,241 completed responses, which is an increase of 5% from the survey in 2016. So that's very good. That bottom point. The sample size gives us 95% confidence that the results are in a tolerance of plus or minus 3% of presented figures, and that's just research speak for the results can be relied upon. We had good even representation across the regions and the economies and, as usual, about three-quarters of the responses came from the members and the others from stakeholders in the APNIC community. I am going to talk to you about usage and satisfaction with particular services in APNIC now. First of all, overall satisfaction. We measured this by looking at your ratings of the quality of services from APNIC, the value of the services and value of membership. We also asked one question of APNIC stakeholders about their overall experience and these graphs here today are showing you the differences between 2016 and 2018. You can see that, overall, the ratings remained largely the same and they are very positive, 91% rate the quality of the service as highly, and the value of the services. 41 You can see the difference here, I guess, and the pleasing thing about these results is that we have moved some of the neutral and negative responses into the more positive, in good and excellent. So we have really seen a shift from, I guess, a neutral and a slightly positive into the more good or excellent ratings across all of the three questions around quality and value of services and value of membership. The stakeholders results were down slightly from 2016. We believe that that may be to do with usage of APNIC Services. In the stakeholder survey there was less use of particular services than in 2016 and we often see that the usage of services is very much tied to satisfaction and how people feel about the service that they are getting. This is usage in percentage terms of all of the specific APNIC services that they offer. As you can see, more than three-quarters of you visit the website, just about a third of you visited or used MyAPNIC. Usage of the Whois database has gone up by 7% since 2016. In fact, usage across most of the services has improved, which is pleasing, it means that more of you are aware of what APNIC offers and therefore more of you are able to take advantage of it. It was also very pleasing to see that usage of 42 training services from APNIC has gone up by about 5% based on 2016. This is a very busy slide and a very, very positive slide. This is just telling you the satisfaction with the services that you have used. We only ask whether you're satisfied with the service if you had indicated that you had actually taken part. So if you had visited the website, if you had read the blog, if you had used MyAPNIC, then we would only ask you to rate those particular services. You can see satisfaction with all of the services is very, very high. Lastly in this section we ask which of the phrases best describes the way you speak about APNIC to others. This is a very pleasing outcome. The bars on the left are the 2016 result and the blue bars are the 2018 result, and you can see very much that those that were perhaps neutral in 2016 have moved more into a tendency to speak highly about APNIC if they are asked, or to speak highly without being asked. Also pleasing, of course, is the number who would tend to be critical have dropped from the 2016 results as well. Now we'll talk about the operational challenges, and a part of the survey always asks about the issues that are troubling members and stakeholders within the 43 internet operations and how or where APNIC could best assist you. Paul has already stolen my thunder, I was going to say, "Guess what's the biggest challenge?" But this is quite comprehensive. As you can see, network security is far and away the biggest challenge, operational challenge that you are saying you are facing in your organisations. This is very consistent with the focus group feedback that we had and whilst there are other challenges that you face, scarcity of IPv4 addresses is the next largest followed by keeping or hiring skilled employees and the cost of network operations. But it's very clear that network security is on your minds a lot. Deployment of IPv6 is not as big a challenge as it was in 2016. However, it still poses some issues for some regions and some economies. Then we asked specifically about what in network security is the main challenge, and out of that, DDoS attacks and phishing spam, malware and ransomware are the two biggest things that you report you are facing in terms of network security, although intrusion and other breaches and again a lack of staff awareness of security issues are also quite high on the list of challenges. 44 You can see down in the table in the bottom the green and the red numbers. The green numbers indicate those regions or economies where they believe those particular challenges, are more likely to report those particular challenges than the total, and the red numbers are those who are less likely to say they're an issue for them. So that's just giving you a little bit of an indication of where different regions and different economies, the challenges that they are facing. This is just a comment that in the free text comments that we always ask: security is the greatest threat at all levels and is getting worse, and how to tackle this is the biggest issue for the industry. That was summed up by a lot of the other comments that were made during focus groups and free text. Then we asked how APNIC could best assist you with those network security challenges, and again, about two-thirds of you say specific security training courses, and in fact, throughout all of the section on operational challenges by far and away the way that you believe APNIC can help you the most is through training in all formats. So in the particular instance, security-specific training courses would be very useful, and also collaboration with technical security 45 organisations to share knowledge, to share experiences and case studies, et cetera. Sharing security insights on the APNIC blog and on the web are also ways that the community thinks APNIC can be of assistance. We moved on to IPv4 scarcity and asked about the main challenges and what are the challenges with the scarcity of IPv4, and deploying IPv6 is the biggest issue that you find with the scarcity or the shortage of IPv4 addresses. Nearly 50% of members said that deploying IPv6 was a real challenge for them, apart from developed economies, where a lack of IPv4 is largely seen as not an issue. This is quite similar to the results from the 2016 survey. So I don't 100% understand why, but developed economies do not seem to have as many challenges with a scarcity of IPv4 as other economies in other regions. Again, what can APNIC do to help you? The consistent and widespread support for reclaiming or recovering unused address space. There's also considerable support for monitoring and reporting usage of IPv4 although less so, again, in developed economies. Only 5% believe that APNIC should take no action in terms of assisting with IPv4 scarcity and, 46 unsurprisingly, more of them are from the developed economies. It seems to be a general consensus that there's space out there that could be reclaimed. Then we look at what are the problems with deploying IPv6, because it's the main challenge with a shortage of IPv4 address space. Again, similar to the 2016 results, customers are either not ready for IPv6 or there's no demand from customers, the biggest challenges that you facing. Although increasingly, you are reporting a lack of skills and expertise within your organisation and you can largely see that this is in the least developed economies. Again, what is it that APNIC can do to assist you and once again, it's training. Training in all formats face-to-face, online, eLearning sessions were quite popular in the online survey and sharing case studies and best current practice are the two biggest things that the community says APNIC can do to help them. Again, just a comment or a couple of free text comments in the focus groups. Lastly, I have just got a couple of slides to talk about some of the governance questions that we asked. The first was about APNIC being open and transparent. It's a very, very positive result. The result compared 47 to 2016 has increased by 13%. Again, you can see more of the red and the grey from 2016 that has reduced up in the 2018 result, so more people moving into the neutral and positive and very positive side, so that is a very pleasing result. Similarly, whether APNIC is respected in the internet community improved significantly from 83% to 93% this year. Again, I guess, reinforcing the idea that the services that APNIC have provided are valuable, you value membership and the services and APNIC is respected and trusted within the internet community. That's all I have. I didn't have a very long time to talk to you about all of the results. If you want to have a chat with me afterwards, please come and have a chat. I have all the results there and I think that they're posted on the APNIC website now. So you can go there and download them. Thank you very much for your time and I'm happy to take any questions. >>Gaurab Raj Upadhaya: Thank you, Brenda. As Brenda said, we are to open mic, so Brenda will be able to take a few questions or feedback. No questions. Thank you, Brenda, not just for the presentation, but also conducting the survey and the report. APPLAUSE 48 As we said earlier, the survey report is now available on the website, apnic.net/survey. You can go and download a copy of the report as well as some of the raw data. There is a lot of data in there. I was doing some calculations. Brenda said the average time for the survey fulfillment was roughly 25 minutes. We had almost 1,300 fully completed surveys, and that is almost about 23 days of survey filling up, so there is a lot of inputs from a lot of members and stakeholders, and we'll be digging deeper into the data. Feel free to dig deeper yourself, because the raw data is also available on line to some extent. Having said that, this is indeed time for a quick open mic. If there are any questions, feedback on any of the presentations so far, then feel free to walk up to the mic and introduce yourself. >>Aftab Siddiqui: Gaurab invited me up here, so I can't say no. Just a quick question on the treasurer's report. I just want to highlight one important thing, and that is related to lost revenue. I can give a few examples, but let's not call names here. There are certain -- I mean, everyone is aware of vogons, Geoff will look at me now. So as per the CiDR report, there are vogons currently advertised in our region and there are certain 49 organisations which have been announcing unallocated address space for more than one year. I just checked it, it is five /22 which is roughly around $3,500 in lost revenue. So what APNIC is planning to do about that? Any actions or anything? The member was de-registered early last year. I'm talking about one-year loss in revenue. >>Gaurab Raj Upadhaya: Thank you. I think I'll let Paul handle that. >>Paul Wilson: This is something that you have mentioned to us before, Aftab, and it is something that is being looked at. I'm afraid that for the latest status I'll have to defer to George Kuo, who's approaching the mic. >>George Kuo: Thanks, Paul, and thanks, Aftab, for your question. We are of this announcement activities. Guangliang's team, the registration team, do plan to check it on a very regular basis and will be doing our best to contact all the contact information we have. But if there is anything better we can do, I'm happy to hear information from either Aftab yourself, or anyone here. Thanks will. >>Gaurab Raj Upadhaya: Thank you, George. Aftab, I would expect you to do a Lightning Talk on this topic at the next meeting. It looks like I see Mr Jain. 50 >>Brajesh Jain: Thanks, Gaurab. I would like to take the opportunity to thank each and every member of community for showing faith in me to continue the NRO NC. I commit to do my best as required. Thank you all. APPLAUSE >>Gaurab Raj Upadhaya: Thank you. I am looking at some online feedback. I don't see anyone making comments online. So I think it's time we break for afternoon tea and we'll see you back in the room in 27 minutes. Enjoy the break.