On Aug 27, 2012 9:57 AM, "Jim Jagielski" <j...@jagunet.com> wrote: >... > But recall in all this that even when the PMC releases code, it is > signed by the individual RM, and not by the PMC itself.
Apache Subversion releases tend to have a half-dozen signatures. Thus, I'd say they are signed by the PMC. For example: https://dist.apache.org/repos/dist/release/subversion/subversion-1.7.6.tar.bz2.asc Cheers, -g