Down the GPG keys and import them
wget https://downloads.apache.org/mina/KEYS gpg --import KEYS
Download the release and verify checksums and signatures
WIP