Use the links below to download the Apache Portable Runtime from one of our mirrors. You must verify the integrity of the downloaded files using signatures downloaded from our main distribution directory.

Only current recommended releases are available on the main distribution site and its mirrors. Older releases are available from the archive download site.

Mirror

The currently selected mirror is http://apache.mivzakim.net/. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available. Other mirrors: http://apache.mivzakim.net/http://apache.spd.co.il/http://www-eu.apache.org/dist/ (backup)http://www-us.apache.org/dist/ (backup) You may also consult the complete list of mirrors.

APR 1.5.2 is the best available version

APR is the base portability library. Unix Source: apr-1.5.2.tar.gz [PGP] [MD5] Unix Source: apr-1.5.2.tar.bz2 [PGP] [MD5] Win32 Source: apr-1.5.2-win32-src.zip [PGP] [MD5] [SHA1] Other files

APR-util 1.5.4 is the best available version

APR-util provides a number of helpful abstractions on top of APR. Unix Source: apr-util-1.5.4.tar.gz [PGP] [MD5] Unix Source: apr-util-1.5.4.tar.bz2 [PGP] [MD5] Windows Source: apr-util-1.5.4-win32-src.zip [PGP] [MD5] Other files

APR iconv 1.2.1 is the best available version

APR-iconv provides a portable iconv() implementation built on top of APR. It is generally of interest only where no system provided iconv() is available (either in libiconv, or libc as applicable). An example is the Windows platform, where APR-iconv is required to enable the APR-util library's apr_xlate feature. Unix Source: apr-iconv-1.2.1.tar.gz [PGP] [MD5] Unix Source: apr-iconv-1.2.1.tar.bz2 [PGP] [MD5] Windows Source: apr-iconv-1.2.1-win32-src-r2.zip [PGP] [MD5] Other files

Verify the integrity of the files

It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures. Please read Verifying Apache HTTP Server Releases for more information on why you should verify our releases. (The same rationale applies to APR as to HTTP Server.) The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the asc signature file for the particular distribution. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using % pgpk -a KEYS % pgpv apr-1.0.1.tar.gz.asc or % pgp -ka KEYS % pgp apr-1.0.1.tar.gz.asc or % gpg --import KEYS % gpg --verify apr-1.0.1.tar.gz.asc Alternatively, you can verify the MD5 and/or SHA1 signature on the files. An MD5 hash consists of a 32 character string (example: d41d8cd98f00b204e9800998ecf8427e), and a SHA1 hash consists of a 40 character string (example: da39a3ee5e6b4b0d3255bfef95601890afd80709). To verify the hash on a file, generate a hash string of your own on the file, and compare the hash string you get with the hash string published inside the signature files. A unix program called md5 or md5sum is included in many unix distributions. It is also available as part of GNU Textutils. Windows users can get binary md5 programs from here, here, or here.