Many of the distribution kits have been digitally signed (using PGP). If so, there will be an accompanying distribution.asc file in the same directory as the distribution. The PGP keys can be found in the distribution directory at <http://jakarta.apache.org/builds/jakarta-avalon/release/KEYS>.
Always test available signatures, e.g., > pgpk -a KEYS > pgpv Avalon-4.0beta-bin.tar.gz.asc or, > pgp -ka KEYS > pgp Avalon-4.0beta-bin.tar.gz.asc or, > gpg --import KEYS > gpg --verify Avalon-4.0beta-bin.tar.gz.asc
For more information about Phoenix 4.0beta, please go to http://jakarta.apache.org/avalon/phoenix.