...
➜ gpg --local-user "wutao@apache.org" --armor --detach-sig apache-pegasus-2.1.0-incubating-src.zip # Create a digital signature. It will prompt you to input the password, that's the one you used to generate the PGP key
➜ gpg --verify apache-pegasus-2.1.0-RC1-source-release.zipincubating-src.asc apache-pegasus-2.1.0-incubating-src.zip # Verify if all doing right.
...