Once installed, index your entire archive: apktag index ~/Downloads/APKs/ --recursive --db android_archive.db
APKTag solves this with . It doesn't just store the signature hash; it computes the signature_block_hash (the hash of the entire signing block). Two APKs with different package names but the same signature block hash are 100% signed by the same developer key. apktag
You can run: