@marathon No.
You're supposed to hash the certificate in the META folder and see if it matches. The certificate contains a PKI signature of the apk contents (I guess?)
@marathon If you're on an android there's supposedly a termux package that includes apksigner. I don't own one or have an android vm.
