X-Signature is not part of the token. When making an API request, you need to pass the following parameters in the HTTP header: Financial Reports Download API v2 | PayNet APIs Documentation:
i. X-Fiid
ii. X-Timestamp
iii. X-Signature
iv. Authorisation: Bearer <access_token>