{
  "$comment": "Ed25519 public keys used to sign AIO Trust Certification certificates. Verify a certificate by taking `verification.canonicalPayload` from GET /api/certifications/{certId} as the UTF-8 signed message and checking `signature` (base64url, 64 bytes) against the key whose kid equals `signatureKeyId`.",
  "issuer": "AIO — AI Integrity Organization",
  "website": "https://aioq.org",
  "verificationApi": "https://aioq.org/api/certifications/{certId}",
  "registry": "https://aioq.org/api/certifications/registry",
  "algorithm": "Ed25519 (EdDSA, RFC 8032)",
  "updatedAt": "2026-08-13",
  "keys": [
    {
      "kid": "ed25519-gtKMbu7iqc7u6tOC",
      "kty": "OKP",
      "crv": "Ed25519",
      "alg": "EdDSA",
      "use": "sig",
      "x": "6GR2x1CsKSKnbxQKuTKhUUeh7_yH4VAhkYVZTX1NDgo",
      "pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA6GR2x1CsKSKnbxQKuTKhUUeh7/yH4VAhkYVZTX1NDgo=\n-----END PUBLIC KEY-----",
      "createdAt": "2026-08-13"
    }
  ]
}