java -jar signapk.jar certificate.x509.pem key.pk8 update.zip update-signed.zip The output is update-signed.zip , which includes a folder containing the digital signature files ( MANIFEST.MF Common Issues Signature Verification Failed: