Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Their subscription for this is honestly a ripoff and a terrible business decision.”
Apple App Store · 1/5 · 2026-04-28

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256): fc8013d9796bfb4fc31e33c5ca80a6d36bd3260a7cdb39abea1ebde4eb7e48de
Signature (Ed25519, base64): T+dL8LzR9F59wE44doUP7DlnGnBGqrVYTT1+OQIEDKM88U4ZYnGOXy6fFb22foalsTbN4oaByhwRxqfED9jlAg==
Merkle root: c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22
Merkle path: ["fc8468f1157d547a5220b6c08baf8ac4610be3a51bddf0c2eacea3a4ef0bd34e","bbd50f9bd4617dddf240bcda39ab42d6ab66a4a6cecca5bc223eca97672d9071","3b42d0dca8d28f040cc86fa825d3543194b2589a6d529b7fe15408154d398c5b","38d23ecf86d7700a379180ac22d41fec7f9a84a88d609bb3902338300d04b253","87e9150f8fe800a5f7208acfcc6fcf9da941d673653708c4d83af40489302243","2c51147e6450a463082a939895050d3acae47d78a9287c690004f85ab2370186","8e726a96a189e7bd17e7e13c3189156b2474a5441d20abebb8835d44a1372114","cfd6ff497b77bec642f1834957338757fd5330edb3822ea5c7cb3360b9acbfa7","500b5d06aca10ef46520972057fe0a525eca65c0ce6d2d06ae76ab9eb2df1c6f","c40cbc0a31fb1302f732299fcb1b9b24a0857e9d032771eddaa882a9b56801c4","4f4a409828316f3c6174f93fc95756b3e0d7370426e1385dc3cddbcd4e22522e","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…
Expected log hash: 0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:anton-paar","quote":"Their subscription for this is honestly a ripoff and a terrible business decision.","rating":1,"review_date":"2026-04-28","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1521627812?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.