An Apache release is a set of valid and signed artifacts, voted on by the appropriate PMC and distributed on the ASF's official release infrastructure. All voters for a release must verify these items:
1http://www.apache.org/dev/release-publishing.html#signed
2http://www.apache.org/dev/release-publishing.html#valid