{"slug":"apkcube-com-api-v1-lookup-certificate-fingerprint-93fa34","title":"Every Android app signed by one signing certificate","host":"apkcube.com","method":"GET","resource":"https://apkcube.com/api/v1/lookup/certificate/:fingerprint","category":"market","description":"Every Android app signed by one signing certificate: look up a SHA-256 certificate fingerprint to find all packages and publishers that key has signed. Finds repackaged apps and related malware families, since a key that signed one repackaged app has usually signed others. Keyless pay-per-call in US","price_listed":0.05,"price_asked":0.05,"state":"answering","state_label":"Answering","checks_7d":2,"answered_7d":2,"latency_ms_median":1557,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","pathParams":{"fingerprint":"fb920d381bee1b2093f27dc8f13d994da629dc91887d0529b35c9a2dc4f4a6c2"},"queryParams":{},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"pathParams":{"properties":{"fingerprint":{"description":"SHA-256 fingerprint of the DER certificate, 64 hex characters, with or without colons.","type":"string"}},"required":["fingerprint"],"type":"object"},"queryParams":{"properties":{"page":{"description":"1-based page. Defaults to 1.","minimum":1,"type":"integer"},"per":{"description":"Rows per page, 1–96. Defaults to 24.","maximum":96,"minimum":1,"type":"integer"}},"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-25","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.05,"price_match":true,"latency_ms":2720,"error":null},{"day":"2026-10-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.05,"price_match":true,"latency_ms":395,"error":null}],"description_full":"Every Android app signed by one signing certificate: look up a SHA-256 certificate fingerprint to find all packages and publishers that key has signed. Finds repackaged apps and related malware families, since a key that signed one repackaged app has usually signed others. Keyless pay-per-call in USDC on Base or Solana: no account or API key.","last_updated":"2026-10-24T09:30:59.32Z","schemes":["exact"]}