When I downloaded apksigner from it, it was downloading it from some strange mirrors, and not the official Termux repository. What’s more, when I signed an apk with it, its content unrelated to the signature changed - so that the F-droid build checker later gave me an error. When I downloaded Termux from Google Play and ran the same command, the apk content did not change.
Described package: com.termux
Described command:
pkg install openjdk-25
keytool -genkeypair -v -keystore /storage/emulated/0/Download/my-release-key.keystore -alias myalias -keyalg RSA -keysize 2048 -validity 10000
pkg install apksigner
dpkg --remove --force-depends openjdk-21 openjdk-21-x
apksigner sign --ks /storage/emulated/0/Download/my-release-key.keystore --ks-key-alias myalias “/storage/emulated/0/Download/app-release.apk”
app-release.apk - pre-downloaded unsigned apk file.