Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cancelled the subscription and requested a refund from Apple”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a0e3487bd29512ae781dcb7cf95e3f87805d847b50f7981219fbb86fb845ed4e
Signature (Ed25519, base64)
ezo6ijAi8+SJS8Y8/wAAav+CWI1+BVygBUfQUUUnadM+Sle8cSNxrqth3QoxVteL19aUQV7WiALbG4Rb4/g9Dw==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["a0e35758fec44fb06b93d3e19585836f68d27822f8ee7304d778e582116207c5","5c8ea7981c26188d7c6226654cd3061d0af094686bf48e7ce1bdbab1f790b76f","41de5bee26fdb642073ca227dfdc7608c6cebbc9aededd30c0aaa8d3a7a77880","74ff87c9bd72032d76e76c269d4285da92bb4ad5b35b8834ee216710018c0a0c","e8b7bcff8c2ccb4da34a0f06dc8b82422fa0b2a9caf0a31806a95ff3763b7cf6","4eca97df838d27c98c7f2ca4e9884aa524ca98a5580f90c42171d01bbb9ec08c","35ce8d011d599f546784a0dea2d4d8ea75db104fb2042ac163e78073a705e297","fd94a59ef83f3b77e8b843a2fa93933504ca5db7deb3dcaee145e4a5865c9876","b4e2c2320b8a8b2f4440b1feffcfb58b8050d6df629446935b03712742fabc07","088fb5141a492ecf9d80f98fad69b39770ad4f5358a162a74758c6df06d5cce9","c18038b9eee15a98ff0c9a67f0d42e9a1ba8326ae16314b715e10ab4b39eaea5","4f7fab7f9944636775aa45a893968ad251501032c1b813bc247dfe9d124c9c59","a00b4601749348f2fcd6f79560c522307796ec3ce8055ec55da33a69b027ab14","6d215dc9023570789455be9902e0d62b0310ab7bcbe811daa69263c90da55ffe","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"theme:xodo/returns/en","quote":"I cancelled the subscription and requested a refund from Apple","rating":1,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/in/app/id805075929?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.