Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Login has not been possible for days”
Apple App Store · 5/5 · 2026-06-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514188040

Proof data

Record hash (SHA-256): 6781444978792ba496eaf8e55c689fcdd3436894919302ab002671d247f750f1
Signature (Ed25519, base64): 3BOY8FpKIxdr2J++eWjBYjvuJSbmXH/JJGUDw5Re9qoZUV9vfBLErU7AdQQ143O1Q7Wm8t3SbtFZ0RV63FtoDA==
Merkle root: 6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path: ["677cfde5a7e971752c00fc2d691d887afac6384018e28424a59980f6977ed193","6af0e983454c6b77a4016cd814b7879006e47a98c8530571f536ceb8168cac60","71b7a02f4463b30e6e7916b5a3e9ecabccfbac35b44bee6f9ca1d8295054d50d","634855384f35f1bc166283cd5d514de2a468c9a217dc82f4ec3b995d51ea44f9","3e7c498194c5a1a7381102c54f4b8b93030a228d931c297e60d889fbdd4f23b1","8ca6cd4d197b0d5ce0d31515b6b36f58f2be6f2c6fa575d4aef9c2da577a3baf","a9b818853461169a46c634da2eb1cf863e71bb9be71a2a52600994d24786101b","c81b5f3fc01d360972bb48b3b5a23c76f7ab61ef6238658d8add3b2d4fcb39b2","8d6e157054ce1360eb53ebbe7e6eb5e29e3448c02f18700c2ef465c3168b3941","ea91c22bf5b7cef9e1b26f3c8dcf6288b3220c3e505917baf87d46b59d9a542c","c52fd4024e958de2e8dd4459e9bea3f11ab289d15937e14245a634b71c960945","fe7f476da297d61cdab645b6310135c63fe8408e5adebc82290280e55618d546","c8bdb6f44b6fa1ffbc76cbd7bb8bbcec4d6cde88e65e58d7ec446a36de9d7be9","67223d7a85c1115e9dde948af20504ca3bc62c9ea97637792b53682f25f6d8d4","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash: b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787125125654","kind":"published-quote","locale":"en","page":"theme:sunrise/service/en","quote":"Login has not been possible for days","rating":5,"review_date":"2026-06-06","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.