Down the GPG keys and import them
wget https://www.apache.org/dist/mina/KEYS gpg --import KEYS
Download the release and verify checksums and signatures
WIP