I am using SN.exe to generate key pairs and to extract the public key from
the pair so that our developers can do delayed signing without having to give
them the private key.  Here's my concern.  The public key and public key
token displayed from the key pair and the public key only are different.  
Should this be?

Try this:

sn -k privatepair.snk
sn -p privatepair.snk publickey.snk
sn -tp privatepair.snk
sn -tp publickey.snk

Note that the results of the last two lines is distinctly different.  
Shouldn't the extracted public key match the public key from the key pair?  
If I am delayed signing files and using app.confg to reference other
assemblies via an assemblyIdentity, what public key token would I use?

Thanks,

Brian