Production Amnezia Gateway public key provenance
================================================

Protocol baseline: official AmneziaVPN release/tag 5.0.0.5
Source commit: 4d28f819650a747c3aa4997b503dcf2f4259cb19
Android asset: AmneziaVPN_5.0.0.5_android9+_arm64-v8a.apk
Asset URL: https://github.com/amnezia-vpn/amnezia-client/releases/download/5.0.0.5/AmneziaVPN_5.0.0.5_android9%2B_arm64-v8a.apk
APK SHA-256: 27703c69767031a632272c50eedc5627f8a1961db55a1099dade5a4bcab57f42
APK signer certificate SHA-256: 735ded9e687ab6b4ebc7b1f93b57f1f07310282167d160e684cfafaaff0d3e94
ELF path: lib/arm64-v8a/libAmneziaVPN_arm64-v8a.so
ELF SHA-256: a048f98394e85e4188ce81092a29fcfe9044112109b720bd8fabfd5009664c61
Selected branch: m_isDevEnvironment ? DEV_AGW_PUBLIC_KEY : PROD_AGW_PUBLIC_KEY
Key type: RSA 4096, SubjectPublicKeyInfo PEM
SPKI DER SHA-256: 366c5a9a012aaecd10c4abdc0d63c42ee081dbb24dea1226efa8c738ba9abff5
Source PKCS#1 DER SHA-256: ee6dfc3c41db886e980761d87ce86cd72f0f5f28de38ebf2d29eea25795294cd

The Android APK and extracted shared object are verification inputs only and
are not distributed by this package. The executable verifies the SPKI digest
and RSA size before every Gateway request.
