This APK was signed using a signature algorithm that was disabled because it is broken.
Since April 2017, APK signatures that use MD5 are no longer considered valid,
apksigner will return an
error when verifying.
Read all about it here:
Also it seems that
apksigner will regain its trust in MD5 for now: