The signature of “MapboxCoreMaps.xcframework” cannot be verified.

[bsrz]

Environment

• Xcode version: 26.3
• iOS version: 26.3.1
• Devices affected: n/a
• Maps SDK Version: 11.12.2

Observed behavior and steps to reproduce

Unable to build, consistently getting following error:

❌ ~/Library/Developer/Xcode/DerivedData/MyApp-gsdrcpmfbgpdfugwfswohhfmdhwo/SourcePackages/artifacts/mapbox-core-maps-ios/MapboxCoreMaps/MapboxCoreMaps.xcframework:1:1: The signature of “MapboxCoreMaps.xcframework” cannot be verified.
    note: The signing certificate has been revoked (CSSMERR_TP_CERT_REVOKED)
    note: ~/Library/Developer/Xcode/DerivedData/MyApp-gsdrcpmfbgpdfugwfswohhfmdhwo/SourcePackages/artifacts/mapbox-core-maps-ios/MapboxCoreMaps/MapboxCoreMaps.xcframework: CSSMERR_TP_CERT_REVOKED

Expected behavior

The signature of the framework can be verified by Xcode/xcodebuild and successfully build the app.

Notes / preliminary analysis

I have tried a few different things.

1. Delete the cached SPM artifacts (signed with the revoked cert)

rm -rf ~/Library/Developer/Xcode/DerivedData/MyApp-gsdrcpmfbgpdfugwfswohhfmdhwo
rm -rf ~/Library/Caches/org.swift.swiftpm
rm -rf ~/Library/org.swift.swiftpm

2. Clear the OCSP revocation cache

sudo rm -f /var/db/crls/crlcache.db /var/db/crls/ocspcache.db
rm -f ~/Library/Preferences/com.apple.security.revocation.plist

Then restarted my Mac.

3. After restart, resolve packages fresh and build

Open Xcode → File → Packages → Reset Package Caches, then build again.
This will re-download the Mapbox xcframeworks.

4. Temporarily bypass revocation checks as a diagnostic

defaults write com.apple.security.revocation OCSPStyle -string None

Despite all of the above, the issue persists.
Any help would be greatly appreciated.