Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Can’t cancel subscriptions”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1906e394bd5a9ade2970d9fb5a24ef9c2ba2c1ad01ae024820e5638a8b8e29ac
Signature (Ed25519, base64)
K3wby3/Mg+rzFGoipkhOion84K48m2cA5Tb+4l+D+jAsMh8ujB1apOlQDctz3/O5j2xpQWm7FDHBFKkafQhBDA==
Merkle root
9809cd1f65a3d4e144579745a20f7882b635b7ad9e75f8b31fa040fcb7e74470
Merkle path
["190a78388b68147a083db67b9ab56812f9d57cd24259aff78febdbab74f96d63","108adeda184f5c694e4d99661d33c4d13ef812891f7b216f066a144b4870dca6","53329536a9592314c65a9a50fb749cab0f143ac73f4f46f0e32d9ec68c84c687","885d9a6d23a120d08257e16d8f57b7953c15acaf4faaf0a106300f2559126d10","edc46e81ef42c1d1911e59b39b53ef6d5266f4a9481e827c2005787efd310fe7","f8269313620d11c3d5c2964d0c81e5eab93edc4853bf82a4942565093db6601f","021e2ae55d57ec690fa86acda8411e7202a77de16925ee57470c0113b7a4915a","3918d68b1681b3abd4c14739d9de76065e49503cf17f4e7a4a4b7c9f3edfa466","af2d0210f16722219878a70aa08e96b3edfd011a2f1144b4405befb1b037213f","16da6af54847f2c9db6c5080c3af2071085975d2082aab849fce2445ae9e265d","aed72f6380a156bd30f10e16ba5dd15d6d430fe8c7275da7e3a65b436e90c021","e50fd6e705a19121f13c4ff47e0138a541535700c4eabe030bf05136074d0ae3","c33a9efcd0298a63eaba2136cfe18dd1517727e1b9e9bbb60122216df6f0406f","13cef35a80378a74af4faef102936039d3a54a741843391bcf32134dd8e61270","5420b3c3f4a7cfc61de84c757928b42517e167d282e291e38912f2169ce60350"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632227861 · entry 108e9186e8c5677a52ba…
Expected log hash
8be5978cb1be4c5daa434c41d0072ddb211c64c3f93b137b58c71c55ff15eb8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787972611008","kind":"published-quote","locale":"en","page":"theme:acrobat/returns/en","quote":"Can’t cancel subscriptions","rating":1,"review_date":"2025-12-19","source":"Apple App Store","source_url":"https://apps.apple.com/za/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9809cd1f65a3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.