Evidence row 71140

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://apkcube.com/api/v1/apps/:packageName/signing"
    ]
  ],
  "name": "APKCube APK Signing History",
  "owner_address": "0xaf4ed8d6d780d15e0937e7fbe65627ed451e9c09",
  "raw": {
    "accepts": [
      {
        "amount": "50000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xaf4ed8d6d780d15e0937e7fbe65627ed451e9c09",
        "scheme": "exact"
      },
      {
        "amount": "50000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "GXEo7ndykiNcvZPzBJqA6rugdkhKXGrKbpx1te6z4Apj",
        "scheme": "exact"
      }
    ],
    "description": "Signing certificate history of an Android app: which certificate signed which releases and where the signing key changed. A key change means a newer build is not an update of the older one but a different app under the same package name, which flags repackaged or hijacked APKs. Keyless pay-per-call in USDC on Base or Solana: no account or API key.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "pathParams": {
              "packageName": "com.whatsapp"
            },
            "queryParams": {},
            "type": "http"
          },
          "output": {
            "example": {
              "eras": [
                {
                  "certShas": [
                    "string"
                  ],
                  "firstSeen": "string",
                  "lastSeen": "string",
                  "transition": "string",
                  "versions": [
                    "string"
                  ]
                }
              ],
              "hasKeyReplacement": false,
              "packageName": "com.whatsapp",
              "signers": [
                {
                  "addedVia": "string",
                  "firstSeenAt": "string",
                  "inArchive": false,
                  "sha256": "b8e3f8c7d0a5e2f1c4b9a6d3e0f7c2b5a8d1e4f7c0b3a6d9e2f5c8b1a4d7e0f3",
                  "subject": "string",
                  "trusted": false
                }
              ],
              "summary": "string",
              "unreadVersions": [
                "string"
              ]
            },
            "type": "json"
          }
        },
        "routeTemplate": "/api/v1/apps/:packageName/signing",
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "pathParams": {
                  "properties": {
                    "packageName": {
                      "description": "Android package id, e.g. com.whatsapp.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "packageName"
                  ],
                  "type": "object"
                },
                "queryParams": {
                  "properties": {},
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-24T09:30:52.024Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-24T09:30:49.446Z"
    },
    "resource": "https://apkcube.com/api/v1/apps/:packageName/signing",
    "serviceName": "APKCube APK Signing History",
    "tags": [
      "apk-signing",
      "android",
      "certificate",
      "supply-chain",
      "malware"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Signing certificate history of an Android app: which certificate signed which releases and where the signing key changed. A key change means a newer build is not an update of the older one but a different app under the same package name, which flags repackaged or hijacked APKs. Keyless pay-per-call in USDC on Base or Solana: no account or API key."
}

What the leaf hashes

{"body":"43719a9ac70add5f33bdaa53082f0be6cd78ed1057afb24fd9ba3b06e7ae5ab7","id":71140,"kind":"listing","method":"baseline/1","observed_us":1793025481676316,"prev":null,"subject":"x402_bazaar:https://apkcube.com/api/v1/apps/:packageName/signing","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xf4ff2f987d04bbd11dbfdaea56fb0cbde70113791108aee0babc5d7da9302e4c
2. 0xafff3a1ae8b2deeba320f14df3b56434d4435a176c869409ce1160c94d9e04ae
3. 0xe8641de7632a4885f6315e70befb362180d3549d13f6bfa1d54161942382c9a8
4. 0x750b5d5fe6dc2bc5ec8ef57d1537d1c59fb5fc2a9650a585b4e94b1de0220cc4
5. 0x3a0aa99a2017d61cdced8ce8ec0eb3fca934443485b0c1d08783014c83220b3f
6. 0x63a04d7fcc58d391bd48504f05f1488abad82f1f35e878114541078de29a4909
7. 0xdfdc57b82d0c799efcf52b449ed5bb66a506ea04feb99886c4c85827f199a66b
8. 0xbc0314a37f2a16198562db05095c35498ca093ad7c24163023b82605ef070aa6
9. 0x60cc54c8c7fef3a86f858bd19cfe0791e7d127c201e2901a94201e2db3b00c33
10. 0xf7bdc34efb83dc5cbbcb5071558fe87a477728e005b9d180c492e090371b2357
11. 0xd1f6cbd0d3ee44ebe2e23b42e7f1822bbdf0afd342375323b5d4f8bc89cd943a
12. 0x86ae35463d854f3938d986999aa8497e14f0ba2aa6f39a269e1e6d1134f9b847
13. 0x79695e4356ea25a2b58265a824698704cd2c743099ce2dca9e41384ce8f1a8c5
14. 0xd769d41500075835c3b2f9184d223699fb983fd05c29fbcb44d964abc7ee380d
15. 0x68d296b1e00b4899fb83c3fba36fffaefa311eac2903067dbebfe776a12b4a9a
16. 0x5fb5dda563336cd1bc1b9f44c52b76237ae72ed2145cb9290f39f304ca7dd678
17. 0x74a0a08e4e7ab9aa5bfbead33dec7e1c7e8e364cff69a63720d764bbe987aadc

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae