Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Instead of focusing on the expiration date, it focuses on the issue date.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
31e1c257e05b02fbb24e5a9fcd52d894f1460c5166284bdf5fe5d659f2309355
Signature (Ed25519, base64)
zSdtFS5felWmPFxN0DAKWijZwnIc7K1IGGdv9nfbVLxGLmoYsWXfn62J9urkMviv+7RKVvnsGXPgi0/w5FYJCg==
Merkle root
749703591848535a8600340214debbd99b61273e3bed402bec28b292f90ce9b6
Merkle path
["31e18b0af0953f65aa947274091971cff12241b6fee192e9e4ee6cfabbc9c48d","0916d748a7a0a5e847e5d9e08ae421f609e371361cb10e8b5a9abba8eca0977c","d7f2d41dacf2f55aa91826afbeadef2520c1071222109724b66733d82c088380","b5cf525492dc98f794d17cf7ef7e8de24c95e866175fdd3a263240147577893a","9b4d1b5b36a9577d2ad3dc28a86a871ca2f5b15163000f5811055cab30b2abd0","b169dfa5d757676459823f7fdb35686e05efddba32131f44f188cf2dbe5c9f7a","33ffe3c014aae76370c001782a034d8363532116d1b42a7b5e917f62f79b4c16","d3d0d50b67cd7f05a6d797a4a91c61c0bc5ef8fae6c6cfc61e2c3b3d30c0331a","15100bc2728eebdcb656c9a4c1e099cd07a798a1a1ef405aa699e5d29dd71f3f","1b9b2a7710eebc11a06f8903fd62b7c02bf3bd644f91a84bd166e98f029bf655","ee2fe425a3d87ffb1c2864f3e3c4711bec386c809249b6a8ca64398f9bd594cd","e04edd46730d46a7231a44413f4b33243664c2fc3601cf38f9b64a55bf2c2a61","a2915b90b240e669a284e589beda484d5a4772c71c4de2d4ce016ee69aa293a0","f43a1936699be5b728ab2cee5100b0cce7fa6828f7bb521f1ba149ba44cd48a1","bc5d1d560a30e83fe0f1b6a9452dc46dc135b1a7f73575ec3aa5d459bb76fc8b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514602687 · entry 108e9186e8c5677ac525…
Expected log hash
e53e7f935eb508100ef1046b60c784e0bda15dd54afae176c275a97cf1f64052 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131269839","kind":"published-quote","locale":"en","page":"brand:amag","quote":"Instead of focusing on the expiration date, it focuses on the issue date.","rating":1,"review_date":"2026-04-21","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1627517307?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (749703591848…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.