ClassySharkExodus checks md5sum sha1sum sha256sum and much more (certificates fingerprints…) on both installed or *.apk files (via GhostCommander or other file manager).
They can be copy/paste via long-press.
I can add sha512, but don’t believe any apk come with pre-known sha512sum (?)
btw, I read carefully
and was quite stunned that all these major organizations didn’t simply ask for all pre-installed apps to be just simply
FOSS , not to mention their request (monopolistic ?) to have all these pre-installed apps
preferably through Google Play
(hope F-Droid won’t co-sign this odd letter)