What xcertplay does
xcertplay provides wired and wireless CarPlay. Android Auto is a different protocol handled by DiAuto. Both xcertplay targets require Android 9 (API 28)+; Android 9 uses LocalOnlyHotspot instead of 5 GHz Wi-Fi P2P. An APK minimum alone does not establish vehicle compatibility.
DiPlay is based on this receiver and adds BYD-focused integration and its own interface/package. DiPlay’s release uses bundled experimental local authentication; xcertplay exposes separate configurable authentication targets. Neither project’s test results certify the other.
Official downloads and first connection
The reviewed latest release is 1.3.3. Official Releases provide xcertplay-mobile-1.3.3.apk for standard Android and xcertplay-automotive-1.3.3.apk for Android Automotive OS. They use the same package, com.shilapi.xcertplay: choose the receiver’s platform rather than installing both. “mobile” describes the Android target, not an iPhone companion.
Install the appropriate APK through the receiver’s permitted method while parked. Pair the iPhone by Bluetooth; before streaming, open Settings at the bottom right or swipe down with three fingers. Select and configure the authentication target, Save & Reconnect, then connect the selected MFi hardware if needed. Wired use requires a data cable/port and a USB Host/OTG receiver.
Authentication and hardware
Authentication options include a CH341 I2C bridge to an MFi chip, native /dev/i2c-N hardware, matching local certificate/private-key files, and Remote MFi/BAA. Local files are DER PKCS#7 .p7b and unencrypted DER PKCS#8 .pk8; protect the key. An APK does not supply or validate every hardware, certificate or remote-service setup.
The README says only BAA authentication has been tested for Remote MFi. CarPlay Ultra can trigger a phone prompt, but its protocol stack is incomplete/untested. Do not treat that prompt as working Ultra support or choose hardware solely from these claims.
Test limits and troubleshooting
Upstream reports testing on head units and phones without a universal vehicle matrix. For failures, record receiver/Android, iPhone/iOS, version, transport and authentication target. Logs are at /sdcard/Android/data/com.shilapi.xcertplay/files/logs/xcertplay.log; remove private identifiers, credentials and keys before sharing. Use the official source, Releases and Issues below; this site does not host the APK.