Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Cancel subscription Button does not work”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
39bab300dd92c43949104a0a8f9ecb5eedaf1eb2db2e9092250a12000a6a9e8a
Signature (Ed25519, base64)
UA5z3o0UxDU5m5TzSxkEOwzG/NjHApjoLMHL/M0n7UgCClMO/b0PJjlyWIIrV/xrgJmG5rIPpWVPq0AuAlFYBQ==
Merkle root
e42defaa0a17e226699ea4a82dc9c6dd27c28085170ffe1d62d8c6a4c9215db9
Merkle path
["39bb0eef299ffefc514ea178b31dfe93da4ad9187d055d47aac240fc5330e10e","e98941aeda8d1634932b30028a6812fcc68f65ee1541cdd6263c34a0ef583132","fc3c1756f0dda34b61e1e56e407cada8666360a6b41bb139d1062b1596329822","2747f16062825e6171baee3d2b78b4fdb224f2687b1f56b86e251b5b431f37ef","6e8f8037dce34509712ca71e5ab2483b3a5df091e39f053a9e903930ad1273bc","73c9a682fcf34430382e3f219d784765fbe62ef7249de88503f3212b0d1a1988","0c9de62d02b4a6ab45cccbd320131bd79c16d7f00c8f7829190956c2f6cea618","5b7bde28e1ad3e772ca166550096041ae92f82517f057410a586070be3a6b76f","153b1b83370295dea9abc088d1df80392607e86fe82300b7584705ed037d9d55","bcb38258ae7f5b0aa017ff6ea8aec6455ef9f63d4b671936dd641c63f715d55d","de4c3d0a568c17bc4af64591e797c72ef1655a5f45a77a916d01b10198117f09","41369746f2aa59fa228b16a55139d48ab9dc45564cd6a03f05940ea904ae680e","c525e2385afd6289d1612dd47b0bfef9d0064156d2a036af840c64615471bf9c","f9b10a6aa616ed717dd3cacc1714fe509709e95281fdde9fabb8c6943e906d5b","270a8fe791f18cfa20f43263c29329704ffea666703469cea18570c7ca1219e3"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680856520 · entry 108e9186e8c5677adb25…
Expected log hash
356153ffa6072187539ea75dc6dfb23d03b74238aa8aa70cd6aa9a6a99e983d4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788298923475","kind":"published-quote","locale":"en","page":"brand:nextory","quote":"Cancel subscription Button does not work","rating":4,"review_date":"2026-08-25","source":"Apple App Store","source_url":"https://apps.apple.com/se/app/id993578896?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e42defaa0a17…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.