Counterfactual Explanations and Model Multiplicity: a Relational Verification View