--- /home/fdroid/fdroiddata/tmp/fr.fdesousa.bikesharinghub_28.apk +++ /home/fdroid/fdroiddata/tmp/sigcp_fr.fdesousa.bikesharinghub_28.apk ├── /usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {} │┄ error from `/usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {}` (b): │┄ DOES NOT VERIFY │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. CHUNKED_SHA256 digest mismatch. Expected: <4aff36c19020a1c9be1e527ee2dbb43ca5eb59cc94d3dbd54689f34207ecfd7d>, actual: <65e1be26379e70029fbb1992469d11b66cd0eca37cb732048152836c4014c225> │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. VERITY_CHUNKED_SHA256 digest mismatch. Expected: <459b00d5b04a38f2e3cb432a529e3ff0c831e893d630369b21563ca1b83622c558b7250000000000>, actual: │ @@ -1,42 +0,0 @@ │ -Verifies │ -Verified using v1 scheme (JAR signing): true │ -Verified using v2 scheme (APK Signature Scheme v2): true │ -Verified using v3 scheme (APK Signature Scheme v3): true │ -Verified using v4 scheme (APK Signature Scheme v4): false │ -Verified for SourceStamp: false │ -Number of signers: 1 │ -Signer #1 certificate DN: CN=FDroid, OU=FDroid, O=fdroid.org, L=ORG, ST=ORG, C=UK │ -Signer #1 certificate SHA-256 digest: ed84b762e3fff74659e7d0d8a46efa7d4715d144db28417db908ddc5db8ca399 │ -Signer #1 certificate SHA-1 digest: fbd515180502f433e6a3f7afc71e11ab31021ea6 │ -Signer #1 certificate MD5 digest: 0e9c7605e1569e116687bbe4daa91575 │ -Signer #1 key algorithm: RSA │ -Signer #1 key size (bits): 2048 │ -Signer #1 public key SHA-256 digest: 5098521354620aafe940a0ae13a75f20aaa6675304c89a3ca782c5da0f5af461 │ -Signer #1 public key SHA-1 digest: d37b9e5865a874434ea2669a27fd39958e4c8c28 │ -Signer #1 public key MD5 digest: 5652e93f6394794f53551f64b7e66dbd │ -WARNING: META-INF/com/android/build/gradle/app-metadata.properties not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/android.arch.core_runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/android.arch.lifecycle_livedata-core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/android.arch.lifecycle_livedata.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/android.arch.lifecycle_runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/android.arch.lifecycle_viewmodel.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.asynclayoutinflater_asynclayoutinflater.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.coordinatorlayout_coordinatorlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.core_core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.cursoradapter_cursoradapter.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.customview_customview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.documentfile_documentfile.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.drawerlayout_drawerlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.fragment_fragment.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.interpolator_interpolator.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-ui.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-utils.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-v4.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.loader_loader.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.localbroadcastmanager_localbroadcastmanager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.media_media.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.print_print.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.slidingpanelayout_slidingpanelayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.swiperefreshlayout_swiperefreshlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.versionedparcelable_versionedparcelable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.viewpager_viewpager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. ├── zipinfo {} │ @@ -300,8 +300,8 @@ │ -rw---- 0.0 fat 4830 b- stor 81-Jan-01 01:01 res/zi.png │ -rw---- 0.0 fat 4434 b- stor 81-Jan-01 01:01 res/zt.png │ -rw---- 0.0 fat 424 b- stor 81-Jan-01 01:01 res/zv.png │ -rw---- 0.0 fat 172092 b- stor 81-Jan-01 01:01 resources.arsc │ -rw---- 2.0 fat 20299 b- defN 81-Jan-01 01:01 META-INF/C0CEFA4B.SF │ -rw---- 2.0 fat 1334 b- defN 81-Jan-01 01:01 META-INF/C0CEFA4B.RSA │ -rw---- 2.0 fat 20191 b- defN 81-Jan-01 01:01 META-INF/MANIFEST.MF │ -305 files, 4162403 bytes uncompressed, 2438368 bytes compressed: 41.4% │ +305 files, 4162403 bytes uncompressed, 2438367 bytes compressed: 41.4% ├── classes.dex │ ├── dexdump -a -d -f -h {} │ │┄ Ignoring differences in offsets to keep diff size reasonable. │ │ @@ -1,12 +1,12 @@ │ │ DEX version '035' │ │ DEX file header: │ │ magic : 'dex\n035\0' │ │ -checksum : 8139d8da │ │ -signature : 3c45...13fd │ │ +checksum : 9306d91b │ │ +signature : f1f8...12a5 │ │ file_size : 2843396 │ │ header_size : 112 │ │ link_size : 0 │ │ link_off : 0 (0x000000) │ │ string_ids_size : 24353 │ │ string_ids_off : 112 (0x000070) │ │ type_ids_size : 3355 │ │ @@ -204207,15 +204207,15 @@ │ │ type : 'Ljava/lang/String;' │ │ access : 0x0019 (PUBLIC STATIC FINAL) │ │ value : "fr.fdesousa.bikesharinghub" │ │ #1 : (in Lbe/brunoparmentier/openbikesharing/app/BuildConfig;) │ │ name : 'BUILD_TIMESTAMP' │ │ type : 'J' │ │ access : 0x0019 (PUBLIC STATIC FINAL) │ │ - value : 1667240500824 │ │ + value : 1671208171244 │ │ #2 : (in Lbe/brunoparmentier/openbikesharing/app/BuildConfig;) │ │ name : 'BUILD_TYPE' │ │ type : 'Ljava/lang/String;' │ │ access : 0x0019 (PUBLIC STATIC FINAL) │ │ value : "release" │ │ #3 : (in Lbe/brunoparmentier/openbikesharing/app/BuildConfig;) │ │ name : 'DEBUG' │ ├── classes.jar │ │ ├── zipinfo -v {} │ │ │ @@ -26639,15 +26639,15 @@ │ │ │ version of encoding software: 2.0 │ │ │ minimum file system compatibility required: MS-DOS, OS/2 or NT FAT │ │ │ minimum software version required to extract: 2.0 │ │ │ compression method: none (stored) │ │ │ file security status: not encrypted │ │ │ extended local header: no │ │ │ file last modified on (DOS date/time): 1980 Jan 1 00:00:00 │ │ │ - 32-bit CRC value (hex): 32acece1 │ │ │ + 32-bit CRC value (hex): 44ee3f3c │ │ │ compressed size: 471 bytes │ │ │ uncompressed size: 471 bytes │ │ │ length of filename: 56 characters │ │ │ length of extra field: 0 bytes │ │ │ length of file comment: 0 characters │ │ │ disk number on which file begins: disk 1 │ │ │ apparent file type: binary │ │ ├── be/brunoparmentier/openbikesharing/app/BuildConfig.class │ │ │ ├── procyon -ec {} │ │ │ │ @@ -1,12 +1,12 @@ │ │ │ │ │ │ │ │ package be.brunoparmentier.openbikesharing.app; │ │ │ │ │ │ │ │ public final class BuildConfig │ │ │ │ { │ │ │ │ public static final String APPLICATION_ID = "fr.fdesousa.bikesharinghub"; │ │ │ │ - public static final long BUILD_TIMESTAMP = 1667240500824L; │ │ │ │ + public static final long BUILD_TIMESTAMP = 1671208171244L; │ │ │ │ public static final String BUILD_TYPE = "release"; │ │ │ │ public static final boolean DEBUG = false; │ │ │ │ public static final int VERSION_CODE = 28; │ │ │ │ public static final String VERSION_NAME = "2.1.0"; │ │ │ │ } ├── smali/be/brunoparmentier/openbikesharing/app/BuildConfig.smali │ @@ -2,15 +2,15 @@ │ .super Ljava/lang/Object; │ .source "BuildConfig.java" │ │ │ # static fields │ .field public static final APPLICATION_ID:Ljava/lang/String; = "fr.fdesousa.bikesharinghub" │ │ -.field public static final BUILD_TIMESTAMP:J = 0x1842f471e58L │ +.field public static final BUILD_TIMESTAMP:J = 0x1851bc4f6ecL │ │ .field public static final BUILD_TYPE:Ljava/lang/String; = "release" │ │ .field public static final DEBUG:Z = false │ │ .field public static final VERSION_CODE:I = 0x1c