...
➜ gpg --local-user "wutao@apache.org" --armor --detach-sig apache-pegasus-2.1.0-incubating-src.zip # Create a digital signature. It will prompt you to input the password, that's the one you used to generate the PGP key
➜ gpg ➜ gpg --verify apache-pegasus-2.1.0-incubating-src.zip.asc apache-pegasus-2.1.0-incubating-src.zip zip # Verify if all doing right.
...