What is difference between signature and certificate in apk file?

I know a certificate contains a public key and some extra info (I hope) but is it saved in the apk file? Is it a file or text or what? And what is a signature exactly? And in Android which one could we easily read to verify the app?