Summary

  • AFRINIC’s 2020 resolution register records Board approval of the audited financial statements for the year ended 31 December 2019 as Resolution 202006.560. The official minutes of the same 24 June meeting describe the same approval as Resolution 202006.559. The discrepancy survives in the official record. This article retains 202006.560 as the selected identifier but does not choose a supposedly authoritative number that the available material cannot establish.
  • BDO’s unmodified opinion supplied real, bounded assurance: the specified financial statements gave a true and fair view under IFRS and Mauritius’s Companies Act 2001. BDO also said its consideration of internal control served the design of audit procedures, not an opinion on control effectiveness. Board approval, authorised signatures, management representations, auditor signature, financial opinion, control communication and remediation evidence are therefore separate acts with different evidentiary weight.
  • The useful next step is not to treat a financial opinion as either universal exoneration or proof of institutional failure. It is to connect public-safe control observations to responsible owners, dates, implementation records, independent retests, unresolved exceptions and closure status, while keeping the allocation investigation on its own evidence trail and protecting KYC, account, personnel, holder and investigative information.

The approval behind two official numbers

The official resolution register describes a conventional but important corporate act. AFRINIC’s financial statements for the year ended 31 December 2019 had been prepared and audited. The Board was expected to approve them before the auditors signed. The register says the Board did so under Resolution 202006.560, and it authorised chief executive Eddy Kayihura and Board chairman Christian Bope to sign the financial statements and the representation letter on AFRINIC’s behalf.

The official minutes of the 24 June 2020 meeting preserve the same underlying act but attach a different number: Resolution 202006.559. Nothing in the available record resolves that inconsistency. It would be tidier to regard one entry as a simple clerical mistake and silently standardise the number. It would also be unsound. Official records are valuable partly because later readers can replay institutional action from them. When two official records disagree on the identifier, the disagreement itself belongs in the account. Resolution 202006.560 remains the commissioned subject because that is how the register identifies it; Resolution 202006.559 remains a competing official label for the same approval.

This is a modest example of a larger accountability principle. A record need not contain dramatic wrongdoing to reveal why traceability matters. Resolution numbers provide handles through which members, directors, auditors and later reviewers connect an agenda item, a decision, a signed instrument and any follow-up. A conflict in that handle does not invalidate the approval. Nor does it justify manufacturing certainty. It tells us that a careful institutional history must identify the act independently of the label and preserve the discrepancy rather than letting administrative neatness outrun the evidence.

Five acts that should not be collapsed

The approval sequence contained several distinct acts. Management prepared the statements. The Board approved them. The Board authorised named officers to sign the statements and the representation letter. Management representations gave the auditor assertions from those responsible for the company. BDO issued its report on the specified financial statements. These steps support one another, but none is interchangeable with another.

Board approval is not an external audit. It records the directors’ corporate responsibility for accepting the statements. Signatory authorisation is not the same as the actual execution of every final document. A representation letter is relevant audit evidence, but because it comes from management it is not independent confirmation of every represented fact. An auditor’s signature is part of issuing the auditor’s report; it is not a Board act. Most importantly, the audit opinion addresses the financial statements within its stated framework and period. It is not a general verdict on every operational system that AFRINIC maintained.

The directors’ report makes the allocation of responsibility explicit. Directors were responsible for preparing the financial statements, maintaining accounting records and internal financial control, safeguarding assets, and taking reasonable steps to prevent and detect fraud and irregularities. BDO separately reported that proper accounting records had been kept and that it received the information and explanations it required for the audit. Those statements matter.

They show that the audit did not displace the directors’ obligations, and that obtaining required explanations did not convert management’s responsibilities into the auditor’s responsibilities.

What the unmodified opinion means

BDO expressed an unmodified opinion that AFRINIC’s specified financial statements gave a true and fair view of its financial position at 31 December 2019, and of its financial performance and cash flows for the year, in accordance with IFRS and Mauritius’s Companies Act 2001. BDO stated that it had obtained sufficient appropriate audit evidence and complied with independence and ethical requirements. That is substantial assurance, not ceremonial language.

The strongest benign reading should be accepted before probing the limits. AFRINIC subjected its annual accounts to independent audit. Directors accepted their responsibilities. The Board formally approved the statements and authorised signatures. The published report contained an accounting correction and a subsequent-event discussion rather than presenting an artificially seamless narrative. BDO reached an unmodified conclusion under the applicable reporting framework.

Nothing in the available material establishes that the statements were false, that the opinion was improperly issued, or that BDO was required to decide questions about particular registry allocations as though it were an investigator or a court.

Yet “unmodified” is often flattened in public discussion into “clean,” and “clean” can then slide into “nothing was wrong anywhere.” BDO’s own description blocks that slide. The auditor considered internal control in order to design procedures appropriate to the financial-statement audit. It did not do so to express an opinion on the effectiveness of AFRINIC’s internal control. A reader can therefore rely on the financial opinion for what it says without treating it as a certificate for the operational effectiveness of every control, the integrity of every registry entry or the lawfulness of every allocation decision.

That distinction is not a technical escape hatch. It defines the work. Financial statements aggregate and classify transactions, balances, obligations, performance and cash flows according to an accounting framework. Registry operations concern the authority for changes to resource records, the fidelity of allocation files, access rights, supporting documentation and the reversibility of unsupported entries. The two domains can intersect, especially where operational failures produce financial effects, but they are not identical.

Evidence sufficient for an opinion on the accounts may not answer who changed a registry record, under what authority, with what approval, or whether a later correction was complete.

What the meeting record adds

The June minutes add texture without changing the opinion. They say auditor recommendations and a Client Service Report were presented. They record that the auditor would not sign while awaiting a KYC clearance letter from MCB. They also record the Board’s observation that bad debts were increasing faster than in the previous year. Each point is relevant, but each needs a restrained reading.

The KYC clearance was a pending condition identified in the minutes. The public record available here does not supply the letter or permit disclosure of any sensitive banking or account material it may have involved. The proper monitoring question is whether the clearance was obtained and how it related to completion of the signed package—not speculation about what confidential information it contained. Similarly, the existence of auditor recommendations and a Client Service Report indicates a channel through which observations could reach management and the Board.

It does not establish the full contents of that report, the severity of every observation, or whether each recommendation was adopted, implemented and independently retested.

Bad debts deserve the same care. A faster rise can affect collection assumptions, cash planning and the quality of receivables. It can also expose members and operators to institutional strain if financial weakness impairs service continuity. But the Board’s concern does not by itself prove impropriety, and the minutes do not transform it into a qualification of BDO’s opinion. What would improve accountability is a later trail: how the debts were classified, what collection or provisioning decisions followed, what amounts were settled or remained outstanding, and how those decisions appeared in later reporting.

The auditor’s report also says that significant deficiencies in internal control identified during the audit would be communicated to those charged with governance. That sentence describes an obligation to communicate; it is not a public catalogue of deficiencies. The published report does not reveal whether a particular significant deficiency was identified, how any item was ranked, who owned it, or whether closure was tested. Readers should not infer that no deficiencies existed because none is listed publicly, and they should not infer that deficiencies did exist merely because the report explains how such findings would be handled.

An accounting correction and a later shock

Note 24 records a prior-year adjustment for retirement-benefit obligations omitted in earlier years and restates comparative figures. That disclosure is useful because it shows a financial-reporting system correcting the treatment of an earlier obligation and making the comparative record more faithful. It should not be inflated into proof of criminal conduct, missing cash, or successful recovery. The evidentiary object is an accounting omission and a restatement. The follow-up question is whether later periods consistently carried the corrected treatment and whether governance tracked the issue that produced the omission.

Note 25 addresses a very different kind of boundary. The early-2020 COVID-19 outbreak occurred after the 31 December 2019 reporting date and was treated as a non-adjusting event. Non-adjusting does not mean unimportant. The note identified possible consequences including higher bad debts, lower resource requests and altered economics for meetings, while acknowledging that the magnitude was difficult to predict. The accounting decision concerns whether conditions required adjustment of figures at the reporting date.

The institutional fact concerns a major external shock whose future effects could be material even though they were not embedded in the 2019 numbers.

Together, the notes illustrate disciplined classification. One earlier omission led to restated comparatives. One later event called for disclosure rather than adjustment. Neither category should be turned into a broader moral conclusion. Their value lies in showing readers which period, obligation and uncertainty the accounts capture. Good accountability becomes stronger when those categories remain legible, because the public can then ask the right later questions rather than forcing every fact into a single allegation.

The separate malversation record

By June, another institutional track already existed. In February 2020, AFRINIC’s Board said a recent internal audit had revealed substantial “malversation” in IP-resource allocation and that the matter had been reported to the Central CID. The quotation and the referral are AFRINIC’s institutional account. They are not conclusions by BDO, a criminal conviction, a judicial finding or evidence of the eventual disposition of any case.

AFRINIC’s August statement later described quantities it said had been misappropriated, an ongoing police investigation, a registry review, reversals, reclamation and additional controls. Again, these are AFRINIC’s claims and status report. They do not independently prove every quantity, every correction or the effectiveness of every added control. They also do not justify converting IPv4 address quantities into cash, financial loss, revenue, company assets or damages. No first-class valuation evidence available here establishes such a conversion.

This separation protects both accountability and fairness. It prevents the financial opinion from being used as exoneration on matters BDO did not adjudicate. It also prevents the existence of a separate allegation from being used to discredit audited accounts without evidence about those accounts. BDO was not a criminal court, and AFRINIC’s Board could not create criminal liability by approving statements or reporting an internal concern. A careful reader can hold both propositions at once: the financial opinion was meaningful, and material questions about registry integrity required a different evidentiary trail.