apk.static signature verification fails
Steps to reproduce:
% wget -qO- http://wiki.alpinelinux.org/cgi-bin/dl.cgi/v3.2/main/x86_64/apk-tools-static-2.6.3-r0.apk|tar -zxf-
% wget -qO- http://wiki.alpinelinux.org/cgi-bin/dl.cgi/v3.2/main/x86_64/alpine-keys-1.1-r0.apk|tar -zxf-
% openssl dgst -verify etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub -signature sbin/apk.static.SIGN.RSA.alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub sbin/apk.static
Verification Failure
This also prevents creating LXC containers using the alpine template: https://github.com/lxc/lxc/blob/master/templates/lxc-alpine.in\#L86
(from redmine: issue id 4453, created on 2015-07-18, closed on 2017-05-17)