Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Hello, I have an active Canva Pro subscription that charges me every month, but I cannot use its benefits.”
Apple App Store · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524810465

Proof data

Record hash (SHA-256): 72a672044061cc75b08249ddb933b6daf41217737a6d87f21082cdb2edde3995
Signature (Ed25519, base64): +B+V1WODhTvgPNq000xpH2mn7Hqh6DS1+evjA0XOjkCFw5rKuYKwO5hxmacbggbFxOrTxvU1qrLB8yndtC05DA==
Merkle root: 3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path: ["72a732dce9483722aecbd10173993d3950c1c7c1c284cceae7dbe57d25223e1c","d386db24e857a84585faa35546643b059cd7b52362bf0d9e9e111c106bff176c","69b66a9fcf12423f41b8de8705429d4feca89749b07a260a5a651d1af3b91de6","b6d5f38ee2651d1428795ce1db2cfacbf948a16d9018d22e46cc120ad2cc4da8","e8fb2ae670af6a47d84a254037737bcd7c98a5b3bc7412013d4ab0f5a681c464","6bb2871ca2ba0fc69b863576e92a5df81c73f2c44bdfc75d26f962853c50bd54","5fb5ce738b5bd1fbeb46d3ae5843be9f4d2e83f12e02bf7451ce66c51998ee91","4eee05e296f11483425f3f88754915b4f7bbd9d0a654b435a69c93b03e85fdfb","ac8114d9bd74c96ec85cc52717d74b78678ed52dba8fdc632655f32c4645ad8d","0f4878ef37f2bb477117e86adc0b6fe4427521edda6a9ad86e48162ffa973db6","ca697e45f314d2ec793dacd7428b5a64c72370d4e9f1d6f8da2582619b441f7e","8795cc9548a27d4792f561ed0be236baf1443f07eafb28127c878d07543db8bb","985842e3b7b7b05d065d3478b9548322db9ef51189928c897e184837afc0a836","16ce5ef98bea97aaac8d473cbc69dd111bbc7f7387aea9596c8bffc373b8312d","db72b82118c1e08b77018004fa72584377d6eccdc4c75ec19bef6a78273f75c9"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash: 129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787193927339","kind":"published-quote","locale":"en","page":"theme:canva/billing/en","quote":"Hello, I have an active Canva Pro subscription that charges me every month, but I cannot use its benefits.","rating":5,"review_date":"2026-08-12","source":"Apple App Store","source_url":"https://apps.apple.com/ar/app/id897446215?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.