Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Just save and print …that’s all I need.”
Apple App Store · 1/5 · 2026-08-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2582625066

Proof data

Record hash (SHA-256): 15dc979f0a4caba2350636a661e116a1593c46444504e86c7e6a73cb467c3936
Signature (Ed25519, base64): 3VM508qZYzU7+vNJkQVqe6QRsDdC9JXLM3zrkhAZKXhhWg1VcsRLDQEy13l3+qdp7trPfgeXCiFthPF7qkFdAQ==
Merkle root: eeae4c43ae7ab0c29c10de74b2463aacd3a5fdc1b3d5af1f0cfc9c44408c3d2c
Merkle path: ["15de12b6fa4f33a38d84f8efbf9ebf616adcf7d3f1463f18c27c1a0922056bda","33ebbb44e64799737e7f13b9a33e8dc84cdc5720f1b84f6e5a17e3878edff465","f065944e2a32773f93a8f2e9710e2d7686b897c724ab820cfc5a6291e346d31a","d824634525c160f082b1df9d71bef3b82de7c7a5e439b95a7e7ec3352a8675d8","3d9009658932d1d3d743c47e9960c2f81b1fd93a751e5e6aac4de6c8c463cfb3","e5633c8abb1325eb0d79adc2c2e035d00e41a556c200da11b11f4ebe310edca8","4034aaec3d2b6b10ebed6aaf880212f81dcd4612f48d16e7b488be7050db6090","6a03f930bc2653b4c866bd67efafffa3c2f9e56bb442f52f685eefeb6241a212","521e1a218004679b39b70e457de89629ba5d38153e09d07dad1c2ea9afabc9b0","8e67d85e615ef8f7192cc98ec0e7a1818fff5dad835d79647b84b778f135b08a","c3db4d64d78ef90e13767bdda2d445983f8128a550c48c26772b7a8e2d3b0db5","66e2f9e97f7287faee8e69ba5b721fce1f6f2784e8d5caead2c36152f02776a6","09ce2032efd09c421ff5e19e5f8876b49dd7ddefb2240728cfc215a6585cd9c9","9147eb1ea2bb6aaaff51700a1e53c8abaa5e7cab4502c6a4e1f7fda7aaeedc63","8d2fad53fc3e7e38908cbd16989002a31ec7c97679dda7189a08552bb7f22778"]
Anchored: 2026-08-25
Public log entry: search.sigstore.dev, log index 2582625066 · entry 108e9186e8c5677a8c30…
Expected log hash: 0b31ace64a4c196ffe669b6f1b426aa3540d319d39e67b6031cad355cff0975c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787627443698","kind":"published-quote","locale":"en","page":"theme:acrobat/ordering/en","quote":"Just save and print …that’s all I need.","rating":1,"review_date":"2026-08-08","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id469337564?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eeae4c43ae7a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.