If primary account number is planned to store in Android application, bear in the mind that still some of most used Android phones do not have Secure Element chips. Option could be using SIM as secure element by Android application. As far as I know Android Open Source Project does not define an API to use the SIM card as a secure elements, but as long as the device baseband and RIL support, SEEK for Android patches can be added. If it is possible obtain SIM profile and OTA keys, custom STK Toolkit applet can be developed and installed on the SIM via OTA.
STK menu application can provide required user interface to receive inputs.
All key management, encryption logic and integrity of encrypted data should be achieved and implemented inside the SIM as Secure Element . Public key cryptography is typically not implemented by SIM cards for mobile network authentication or OTA secure data. That's why available option is to use secure symmetric and hash algorithms. If EMV certification is required, it is better to consult local partner after learning supported encryption algorithms on SIM cards of MNO.