Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.

Error: Old SIGNATURE detected. Please inform the module author to regenerate SIGNATURE using Module::Signature version 0.82 or newer. gpg: Signature made Tue 14 May 2013 02:38:09 AM JST gpg: using RSA key 5F1BF8166B9696F4 gpg: Can't check signature: No public key --- SIGNATURE Tue May 14 02:38:10 2013 +++ @@ -3,7 +3,7 @@ SHA1 82e2a8ca991a452e14f1a44adb86efe52c29f7de INSTALL SHA1 4d7a909a641aef78cab40eadb3e6a01244dfa538 LICENSE SHA1 0b092735e425484dcffcdd1df1f20e9abb522215 MANIFEST -SHA1 95d0cfc25b9ada32abbd5cdf1d36699f9639db08 MANIFEST.SKIP +SHA1 9ced15c2371875c1973d9e7e159f8f448f379e92 MANIFEST.SKIP SHA1 66329b25648ac86c403bc6f1d62e8b119e79b9f1 META.json SHA1 490fc958a06fd2e980d6db36b5946e443bef8bc4 META.yml SHA1 9e7b4ca4bab3a0e0bc4813112317af3b5cb04ad0 Makefile.PL ==> MISMATCHED content between SIGNATURE and distribution files! <==