Short answer: Archive a monthly marketplace report only after checking its PDF digital signature against the exact bytes you will retain. A valid signature can establish that a particular signing key covered a particular revision and that the covered bytes have not changed. It cannot establish ...
Source: [Dev.to](https://dev.to/lyrap22/pdf-digital-signature-proof-for-marketplace-report-archives-and-its-limits-3mci)