Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You can find all your invoices.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
67ccfdef2ec25e3fc0885436bf907d522712ce416bfecd71a7794badb8067e8a
Signature (Ed25519, base64)
SQQ/8HbHglSV8uWhRPSTGPmj+Bk0ncK76ELy31qer/MDyTpOi6M2RBKUnEOmwNxF7Kgc3p9lXy+YJ6mRJuL0AQ==
Merkle root
a086f9fa8309b32cad6e06b6c84c12133a405483807f462eafed4cabc6f3fb99
Merkle path
["67ccd8b25ee3037facf925f76865f197b0d17ef281908984e9f88661c9d635fc","ec3a43f0b19e087f843900266f026bf30f4ecfd9706fa1deb733fe4a0faa0e63","8b97654369a6d989fb8b4c05c17ca54571d61aee97412d2ff3cb985966486f62","4077dcefe85f31f0bf71f9be2660d8aeb356356739729e0c7b1ba9e758db712a","fe9a353d51878dfb041ff418dae3840f4fc370babc88cbe91b6ab0602717ceb5","baa07c82eda6d77295386b3b0f1dede61f60b9d282a5a0c8430b598514614d8b","6288caf9efdaa077d7ed6870ba9b4e3b7ce79e78d52e506781b0521c028f5ca6","90324494946818d8292ba8e1ba19e1b2d71d61015a1416cc83c6127c732c15d0","44eb60d370cb58b7dbd8f1b228e4bc513f0e65e08b072651aef9d97c013feef7","9cff19da083cabbd5266cfb1b3fbd77d891981865c4e5b007fabd682c84d7816","423c033c40ba143c6f84aa2a773cf83469afd70fc0d9aa701605d7ae7efb335c","246afafffca2f7633ac3b302d7076540ed8eb1b54bcdd20ea0afda4f6f41b399","c1423a4d1e3405e61a7dfa0f9f0d35446d77e6ae8a2a30431655b9bbf5a67719","1d7676f67710cf1152e64179021560b173262f0f0c11c7101c22e9929c376319","d4cf3fd862731bc6a1728d66b360c0434f801f84e015a828556d2731bd771b26"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514476227 · entry 108e9186e8c5677ab19c…
Expected log hash
9a346357c8991b17bced8f12238c2332c4ac3078c0d9a283ee00f82b3c69be66 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787129084398","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"You can find all your invoices.","rating":5,"review_date":"2025-01-19","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a086f9fa8309…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.