This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-appengine-java-12.1-squeeze-i386-xen.tar.bz2.sig
      gpg: Signature made Tue Jun  4 20:21:20 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  e521aeb1fd64d0824c4c060b11bad34d08755cdf
    * md5sum   cb9ba1fe25e84084b6484fd8710ef2a5

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrkwsAAoJEIXCXpWhbrlNYfgH/2QPI+q7hKDm63LNVOUCTSTj
ZRT99ybA5HoGcrixklAjvqZ4mPp3HNDWbxK6PpazmETBYoyZi13QWHRW5BC06vbL
GyO4ndlaZvZz7+sqSHRU5DyCRajutMaVQR8/Zyk7M2rZ8ak0IqPtZzBO7AnwhWRK
YSmOm7J8zUKhiFRSpV/3IZw8jQ9Kpl2mS4tIayltdbb82TqDdtjBnMYulQdfLdaX
C64hSmnCo0cclCjXm0aPAON4Dw4dnAjlP5liHZy+DlnAjB26u7JSe3FiJ+GuylSg
fUP8n4CQg7C/XCaiusQ9SXRP7kot8m0QdnwdeizOW9H12p+RUVPbHnrY6dm/S3E=
=2zSC
-----END PGP SIGNATURE-----