Are Fossify Gallery and Fossify Calendar SHA wrong?

[MirmiQ]

Hello! I was trying to check the SHA for Fossify Gallery and Fossify Calendar apk with AppVerifier, but both are not matching with the SHA reported in the release page, anyone noticed the problem? Or maybe I'm missing something?

GitHub's sha256:.. value beside the release asset is the digest of the entire file, which is expected to differ between different files. AppVerifier is displaying the SHA-256 fingerprint affdb124d3f4720c2f98dbca9eacba0514fba4306e20a2786c861c3c0d6ff292 of the app's signing certificate, which is the same for both Calendar v1.10.3 and Gallery v1.13.1 because both are signed with the same signing key.

[MirmiQ]

Thank you for the answer! Sorry if I ask a newbe question, I expected to find the fingerprint you mentioned (that correctly match with my AppVerifier btw, thank you!) in the readme section of the app here in github. Is it mentioned somewhere else? (I'm still learning how to check apps that I download with Obtanium before I install them)