Evidence row 71149

Observed 26 Oct 2026, 14:38 UTC, by baseline/1.

Kind: listing
About: source_record x402_bazaar:https://apkcube.com/api/v1/lookup/certificate/:fingerprint
Recorded: 26 Oct 2026, 14:38 UTC
Previous row: None: the first of its kind about this subject
Body SHA-256: 31640acf530503e352a5d8b9ce9d6f3265edc8c22b6a58918461626724a28715
Leaf: 0xce5c1254f5e983b59fc77a9cc40cbb0a44460d83d542a621ee2f1d15e5208e17

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://apkcube.com/api/v1/lookup/certificate/:fingerprint"
    ]
  ],
  "name": "APKCube APK Signing Cert Lookup",
  "owner_address": "0xaf4ed8d6d780d15e0937e7fbe65627ed451e9c09",
  "raw": {
    "accepts": [
      {
        "amount": "50000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xaf4ed8d6d780d15e0937e7fbe65627ed451e9c09",
        "scheme": "exact"
      },
      {
        "amount": "50000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "BENrLoUbndxoNMUS5JXApGMtNykLjFXXixMtpDwDR9SP"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "GXEo7ndykiNcvZPzBJqA6rugdkhKXGrKbpx1te6z4Apj",
        "scheme": "exact"
      }
    ],
    "description": "Every Android app signed by one signing certificate: look up a SHA-256 certificate fingerprint to find all packages and publishers that key has signed. Finds repackaged apps and related malware families, since a key that signed one repackaged app has usually signed others. Keyless pay-per-call in USDC on Base or Solana: no account or API key.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "pathParams": {
              "fingerprint": "fb920d381bee1b2093f27dc8f13d994da629dc91887d0529b35c9a2dc4f4a6c2"
            },
            "queryParams": {},
            "type": "http"
          },
          "output": {
            "example": {
              "algorithm": "sha256",
              "blocked": false,
              "blockedCount": 0,
              "fingerprint": "39:84:2a:0f:4d:2b:8e:11:7c:93:25:6e:dc:1a:5b:f0:94:7d:c2:3e:81:6a:59:0b:fd:44:72:9e:13:c6:a8:57",
              "items": [
                {
                  "addedVia": "string",
                  "appName": "string",
                  "firstSeenAt": "string",
                  "packageName": "com.whatsapp",
                  "trusted": false
                }
              ],
              "note": "string",
              "page": 0,
              "perPage": 0,
              "subject": "string",
              "total": 0,
              "totalPages": 0
            },
            "type": "json"
          }
        },
        "routeTemplate": "/api/v1/lookup/certificate/:fingerprint",
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "pathParams": {
                  "properties": {
                    "fingerprint": {
                      "description": "SHA-256 fingerprint of the DER certificate, 64 hex characters, with or without colons.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "fingerprint"
                  ],
                  "type": "object"
                },
                "queryParams": {
                  "properties": {
                    "page": {
                      "description": "1-based page. Defaults to 1.",
                      "minimum": 1,
                      "type": "integer"
                    },
                    "per": {
                      "description": "Rows per page, 1–96. Defaults to 24.",
                      "maximum": 96,
                      "minimum": 1,
                      "type": "integer"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-24T09:30:59.32Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-24T09:30:55.446Z"
    },
    "resource": "https://apkcube.com/api/v1/lookup/certificate/:fingerprint",
    "serviceName": "APKCube APK Signing Cert Lookup",
    "tags": [
      "apk-signing",
      "certificate",
      "android",
      "threat-intel",
      "malware"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Every Android app signed by one signing certificate: look up a SHA-256 certificate fingerprint to find all packages and publishers that key has signed. Finds repackaged apps and related malware families, since a key that signed one repackaged app has usually signed others. Keyless pay-per-call in USDC on Base or Solana: no account or API key."
}

What the leaf hashes

{"body":"31640acf530503e352a5d8b9ce9d6f3265edc8c22b6a58918461626724a28715","id":71149,"kind":"listing","method":"baseline/1","observed_us":1793025481691113,"prev":null,"subject":"x402_bazaar:https://apkcube.com/api/v1/lookup/certificate/:fingerprint","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).
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Day root: 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained: 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published: On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON