Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cancelled the subscription and requested a refund from Apple”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f366644b63e7ad2b2ec2c4aa104061fa1ba1d0ca0dd8b5c0d8e916b8116f4140
Signature (Ed25519, base64)
7IopwOkbTetuKM1GTP+KTnmS8OJ6UH/WcKmtC1CasKfs8DzZU6Yu0kLZ+6rK4ZlMTMhiB3EaZJA3MjqGrp+9AQ==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["f3663e301bb2533bbfc15160551832618debdc786d9be5c0eef167f0c37cb7bf","15b8a068a0fecdcde554b09a8ed28939eb57449fe76788a536d24d81273f7ea6","a551a503f6be4ce4ea5ac998400fb3fc20caa30a66d9dad09fea75563b0c8f71","f81871540e752a44f8325a75b4b25e2c3a0bd6fe789affb658cfedd5f563079d","d86ef773fd373e3ec127973c01c0cf48fce5f4bbeec1f601d5b251071d20f805","70b35fd20b2baccf5fa24b81dfd6d4b1822bcbac1ce9a5a5c20a05fefacf5088","7eaca2ff4520cbbb72235145b195e03a224ca0653539b91c38c1e2f5034e87c2","331cc44e23bdedcd8345f1cf938e619bb66a92b0756bace58be81f0afd52d53e","6e139e08a7fa2572130837db920f2a27f0a5cabbaa4271ff8701dcc4dfae8503","ccc8dae456d6ff6d635b771dbd63391e9a2c259d22f33296b6570acec262f7ff","10d5557a4b81a4b592f1a42b44141493672ea95e8e0075cd4773b77649b166ab","4ead2e48718cf6823c15813aaf31284c132ede1f0bf5c465ab4c472e9d95cabd","224859803387e2d5d55f4d99200baf1853b57ca9280b91ad0b25d9ec06abb7dc"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"brand:xodo","quote":"I cancelled the subscription and requested a refund from Apple","rating":1,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/in/app/id805075929?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.