gpg --verify SHASUMS256.txt.asc
gpg: Signature made Sun 02 Apr 2023 21:09:28 BST
gpg: using RSA key CD8D406569B5047AC1BD8CBB7C0D9E4A52F34905
gpg: issuer "zap@zaphq.io"
gpg: Good signature from "Zap Solutions <zap@zaphq.io>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 1787 F0D4 271D 50E0 6DF0 B131 2182 27FB BC54 08CF
Subkey fingerprint: CD8D 4065 69B5 047A C1BD 8CBB 7C0D 9E4A 52F3 4905