Search code examples
androidcertificateapksha256fingerprinting

How to verify the signing certificate on an APK matches the SHA256 fingerprint?


enter image description here

Refer to the screenshot, please.

If I have gotten the APK file, how to verify the signing certificate on the APK matches the mentioned SHA256 fingerprint?


Solution

  • apk files are just zip files which you can unzip them. after unzipping the apk, find the CERT.RSA file in META-INF folder and run this command

    keytool -printcert -file C:\Path\To\CERT.RSA
    

    in its output you can find the SHA256 fingerprint