title: What does PackageInfo.signatures return?
body: <p>Why there are multiple signatures in this value? Are these values the public key of the package?</p>
  
  <p>Can I uniquely identify a package using this signature instead of reading the files under META-INF, or calculating an MD5 on the whole APK file?</p>