Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They have Apple deal with all subscriptions and refunds.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
37ae15c53ffa7ac9f9b17b68f5e5bb473d2b66c101a2d9f6012c4bf2e182115e
Signature (Ed25519, base64)
/7dr2+VqxsakBVJcWItiFjSQzLxFS2UcvsJ0q6Vaw4TgmeKus241k/VnDaHIucYm5/u+5n8tfNsSYZjYDlPuDg==
Merkle root
4fe8751e7d70c50e0cd3fed6e9eeb32edf31f624f79d82d9ec3817eddba7a9fa
Merkle path
["37af90483caa33202cc641e9e0d284b100a6ce591f7864327606e2262c197868","8fce3c1b3d64027c12c9b550173b42ae32beca4d046131212beaa829485d4c19","68f2158590bbad9a481af68cfa6ca6d0527c613adb9c38989dc113b05aebb963","de3126eca889caeebac0a276ab5cc038a7b27c96075308ee6e91d21ecd408d92","b27adacc4acf9a4ca5553e6e198753a34a53a752bdea372d92d8f77dd1d6c20e","bafee9015132490c7eac03de0db18222ff26373ac5ff726b76bda65a06b0cbd8","6819675d8a896ba855f747d5221a18d35dd3c8fe2b351d982bd581c7c1480bf2","2618de2160badb99ab43f34052df05f64a6aaf440a2014cd7d6a837c23aa9f5f","b9ee70efefb58e60cfb3fe0c0e9cfa6bfa3ada5a7f44dda99b8af08f3b2b9ce5","7e9b1e141f9002c8b6d47a46f2544e4c8ff99596d49ff026d7f8a8c73f519158","ef2cf961874cde5d0111c847a396f156e6f1e3dbf4e4f812929fd9eed5d37425","68f093e364ac3be8a5464236fc194346417d66e71a492c083418bceb7f1b959f","b9cbcfa50142d2818924cbbcf9ed0d1f201b4fb9c10e46572fcca45dc6f23f72","b949a5b1fe3c5409c484815b6b1e0675f1b11819a9236a5e546056d1971b9a8e","1d8f51436982e85b24ea8b1426a5f0ee7a81143ad75096c92a05493708dbae01"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682933759 · entry 108e9186e8c5677ab48c…
Expected log hash
d15c976489915f93c119ef146e715f5c01d5064a289c9ac130af05811dc83d56 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788318759763","kind":"published-quote","locale":"de","page":"brand:signeasy","quote":"They have Apple deal with all subscriptions and refunds.","rating":1,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id381786507?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4fe8751e7d70…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.