NAME

       apkverifier - verify the signature on an Android APK

SYNOPSIS

       Command line tool for verifying Android APK files:

       apkverifier input.apk

       input.apk is an existing file with an APK Signature

DESCRIPTION

       Simple  command line tool that verifies the signatures on Android APK binaries.  It can verify APK Signa‐
       ture scheme v1, v2 and v3 and passes Google apksig's testing suite.  It should support all algorithms and
       downgrade attack protection.

       Because Android can handle even broken x509 cerficates and ZIP files, apkverifier is using the  ZipReader
       from  apkparser  package  and  vendors  crypto/x509  in internal/x509andr and github.com/fullsailor/pkcs7
       (https://github.com/fullsailor/pkcs7) in the fullsailor/pkcs7 folder.  The last two have some changes  to
       handle some not-entirely-according-to-spec certificates.

SEE ALSO

       Documentation on GoDoc (https://godoc.org/github.com/avast/apkverifier)

                                                                                                              ()