Yes, it's also in the token (and committed to by the mint signature).