This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-appflower-12.1-squeeze-i386-ovf.zip.sig
      gpg: Signature made Tue Jun  4 19:46:33 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  50701a51140806464e9e7b739ebef516a80f7819
    * md5sum   9fe3d8ad3fc1af0cb39aa97d13214801

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrkQIAAoJEIXCXpWhbrlNG8YH/jqJtYyg2uWGqJe97/cqrj/l
gm5Ut9v7bMOtsx9zUWBLrXLUmmeGfh8VTuhYzMTF/NgXKwkNebXxAuwfnYpvrbc2
hIzvsn4W7V90nwCgwSd/KRJN9gSjyBcU4WKMshcAdIjDQiL/cVlJ5Cm7tkNSc3zk
iX8S+zKjR643ruYNoxp+jCMO82BG2anlGyVVNVqkUsR9hQseXFvIBciVDRLcuATP
ZyQH1EY6OhKm49YEPFrzZ78j6NV6VkaxcKTXukT52oJkA6eYfOjh6TfG8rWsB7hy
EJVwvEoP0hXUGGiIoEE7lugUu2i/Pn5aRkbJDXpCckAceXvHFJcch3HTZSzA4cU=
=3s1y
-----END PGP SIGNATURE-----