Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“When it doesn't find a matching password in my logins, there is no way to simply create a new one”
Apple App Store · 1/5 · 2026-07-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3162173160

Proof data

Record hash (SHA-256): 6c391260efc747806520e873b5f20fc9d3bd5443b922642e8dae948d6a28265c
Signature (Ed25519, base64): RQ8WNYtW13Xp8csVVtCQ1Qr7ZvaCBSrA7Wr2chRSD15xjpvk4WdFGZs7OiM9VGPbeXzrMmPRb6iNa5PuSqafCg==
Merkle root: 47aef0bbc5d347d2f064428fd7eda9e99f7cea2d49004267bc87db0e45c42023
Merkle path: ["6c346670d46a057364d0570f5b2352ec0ac5bc5b70bd8a030c188291a632d823","873fbcb472422c7e5bed507cd4e2e038a6757ee948abfbe9431e5a0e0bac5bba","13bb7eae7d568a5991c829bfa1314676ed258428d2441bccb5d8200cd40574d5","0bf54b730d0223d702e0cee5b9ad9e4472a3601f92747f382543e0fe4307359e","ffb8181e672341f754401cb5395d0fb5b212551c2f53a2d83824030b9da0cff9","c70f22ce3fbd6e957698f270c04ddb3ce38ff9acfce343a9f57502c5f1ced1d0","501ae80c12e2bf4967fa871fcfd7aa06046beee35be13230bfa2478f505be8ef","a552d39002bab21785c994f5b0de65637cfd14fc020dc9d98b8bf672bc4740b2","ae10b746fc7b6a57a012f2550f78699ba2cbb2c976dd7900c9217553cfd4099d","abb0704ae0697970e97027ccd717bfd36404829c0ebd229463a422ec29e83280","e515e0c488ee122934d181a3d75ff9ba6579ec532e2efec772feef1d496f926b","fc59a99ecd8e45f7a4edce8bb3645315ffa61f5b16e71389405bf26368007a16","b965f789d81d31108e28cb7456c86198eef687ef99496f7aa54fa323ddf26edb","0889ae3150c7685b34e529b715a23984c1ad15ae15f158815b083df85c4c26d0","681b858a978b3dea64df3700a937a058d6290a8e519185bef8ee7388d7739dda"]
Anchored: 2026-10-09
Public log entry: search.sigstore.dev, log index 3162173160 · entry 108e9186e8c5677aaa5c…
Expected log hash: 00d82a97e8d5da8f3bb4a78d598390d6b030eb8338f0e0735ffde6aa5047ae68 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791539060014","kind":"published-quote","locale":"en","page":"theme:roboform/ordering/en","quote":"When it doesn't find a matching password in my logins, there is no way to simply create a new one","rating":1,"review_date":"2026-07-13","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id331787573?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (47aef0bbc5d3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.