@marathon No. You're supposed to hash the certificate in the META folder and see if it matches. The certificate contains a PKI signature of the apk contents (I guess?)
CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.
@marathon If you're on an android there's supposedly a termux package that includes apksigner. I don't own one or have an android vm.