Archive signing

Hello. I unzipped a WACZ file (generated by the browser extension) and noticed the following content within datapackage-digest.json:

{
  "path": "datapackage.json",
  "hash": "sha256:c23274e8c731a4d41a64...",
  "signedData": {
    "hash": "sha256:c23274e8c731a4d41a64...",
    "signature": "Paas398MkHW57zk8ccKThXfPU...",
    "publicKey": "MHYwEAYHKoZIzj0CAQYFK4EEACID...",
    "created": "2026-08-18T13:45:37.452Z",
    "software": "Webrecorder ArchiveWeb.page 0.16.2, using warcio.js 2.4.10"
  }
}

Where is this key stored? How do I rotate it?