Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It is a pain to access your account.”
Apple App Store · 1/5 · 2026-09-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3083528439

Proof data

Record hash (SHA-256): c71ab24790b7a30c72dde5546075ead8a8031066f4e2e930fbc79bea61a665e0
Signature (Ed25519, base64): +O28IWXXy3cORIbD+kMeo0uHTMTULj1YT22RxjYoQx1AECvLL9RvguvSR1+5mNO0TDcmyFxyMOZDBgImZvYcAg==
Merkle root: 3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323
Merkle path: ["c717539ff57da6f43fcdd6d42cd9d6d9899c6094c5b73c38e9d1c850f3e98cd5","3f835d2678ec144ddcb5025c759867380bdf530be72341d9ebccd50a4caa4b35","2c299884a25aba86cf3efdcfdd10ae8e70d1c4c958b15291cb664b117c1d2279","4142b0b6f5ca5ad6e8e991a434d6babb6fc2f03167438eca68e32bfb36f3aeb3","9f7db062e8baded4ca7c5ff2539ff8c6f214cce73e527f8fb1e936342af30a9e","151bdf8c5a853b3b0a62d351bc5374768caeab553035572710823e9a2e99415b","c30f00df2f9ea07f99c7eb29be8aac472ba8c09a6d81b3f3e456952595b9d963","2befe021690e2c38c02a8e2588c0936815a16c33a6503174cc37aa305df8f3ba","e82ee4dcf7a2cdaeff1a213db2be9cc30f735b0f7b4bcdc153c673da9585663a","0fa2c6001885e58d36e64c4fe648e30c6d6e0cd36d7a6b153412bbaf053be744","dffc5c3722bf98f88ef7501c9573b52baf00fb547394decef5fb86f6bf6b1635","d6e27fa14e2a7687d1152bf8e549b3d88d4c265d880c71c4142620d6fd7926b9","9bda89afb801a1d22cd8905589cd5237ad4f295b6954329d6c8a92352a1f2d04","582f0970476bda674580f5a1da0cf4286664f79c3451840f238219e2e601200f","f188a7ba649f7db7610333505ec2abb71ba1da1ea59f53190cb32e51e57ac1c2"]
Anchored: 2026-10-05
Public log entry: search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…
Expected log hash: 8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791181418024","kind":"published-quote","locale":"en","page":"theme:everand/ordering/en","quote":"It is a pain to access your account.","rating":1,"review_date":"2026-09-13","source":"Apple App Store","source_url":"https://apps.apple.com/ro/app/id542557212?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.