Check SHA-256 against official release (example for version 42.3.21):

sha256sum Phonesky.apk # Compare with APKMirror or OpenGApps hash Also verify with jarsigner :