This is weird. When opening https://people.apache.org/keys/group/sling.asc <https://people.apache.org/keys/group/sling.asc> I see this (excerpt):
ASF ID: andysch LDAP PGP key: 49EC C3FC FD4C DF49 F308 DEC2 7493 91D1 63EF CDEF 49EC C3FC FD4C DF49 F308 DEC2 7493 91D1 63EF CDEF -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1 The public key is hosted here: hkps://hkps.pool.sks-keyservers.net <hkps://hkps.pool.sks-keyservers.net> Not sure why you don’t see it. Cheers - Andy Schaefer > On Apr 26, 2019, at 11:46 AM, Daniel Klco <dk...@apache.org> wrote: > > The command output: > > > PRFT-12626-MAC:sling dan.klco$ gpg --verify > /tmp/sling-staging/2070/org/apache/sling/sling-project-archetype/1.0.0/sling-project-archetype-1.0.0.pom.asc > > > gpg: assuming signed data in > '/tmp/sling-staging/2070/org/apache/sling/sling-project-archetype/1.0.0/sling-project-archetype-1.0.0.pom' > > gpg: Signature made Wed Apr 24 12:41:30 2019 EDT > > gpg: using RSA key 49ECC3FCFD4CDF49F308DEC2749391D163EFCDEF > > gpg: Can't check signature: No public key
