templates/download-verify-file-integrity.html

<h1><a name="verifyIntegrity"></a>Verify the integrity of the file</h1>
                    
<p>The PGP signatures can be verified using PGP or GPG. First download the <a href="https://downloads.apache.org/directory/KEYS">KEYS</a> as well as the <em>asc</em> signature file for the relevant distribution. Then verify the signatures using:</p>

<div class="preformatted">
    <div class="preformattedContent">
        <pre>$ pgpk -a KEYS
$ gpgv {% block filename %}{% endblock %}.asc</pre>
    </div>
</div>
or
<div class="preformatted">
    <div class="preformattedContent">
        <pre>$ pgp -ka KEYS
$ gpg {% block filename %}{% endblock %}.asc {% block filename %}{% endblock %}</pre>
    </div>
</div>
or
<div class="preformatted">
    <div class="preformattedContent">
        <pre>$ gpg --import KEYS
$ gpg --verify {% block filename %}{% endblock %}.asc {% block filename %}{% endblock %}</pre>
    </div>
</div>

<p>&nbsp;</p>

<p>Alternatively, you can verify the checksums of the files (see the <a href="https://www.apache.org/info/verification.html">How to verify downloaded files</a> page). </p>
<p>&nbsp;</p>