@marathon Absolutely not no. That is definitely not how this works. That wouldn't verify the signature anyway, just verify that the download wasn't corrupted.
The hash on the site is the hash of the *signature* of the apk contents (sans the signature/manifest files.)
You can read this as a good starting point: https://github.com/patrickfav/uber-apk-signer/blob/6f0e7b54c1fb3ce85c6f3b1442ca6382f08ec91d/src/main/java/at/favre/tools/apksigner/signing/AndroidApkSignerVerify.java#L23