Apache POI - Download Release

Artifacts
1. Available Downloads
This page provides instructions on how to download and verify the Apache POI release
artifacts. Apache POI is a pure Java library for manipulating Microsoft Documents, for more
information please see the project homepage.
The latest development release is Apache POI 3.8 Beta 5
The latest stable release is Apache POI 3.7
Archives of all prior releases
Apache POI releases are available under the Apache License, Version 2.0. See the NOTICE
file contained in each release artifact for applicable copyright attribution notices.
To insure that you have downloaded the true release you should verify the integrity of the
files using the signatures and checksums available from this page.
2. 17 December 2011 - POI 3.8 beta 5 available
The Apache POI team is pleased to announce the release of 3.8 beta 5. This includes a large
number of bug fixes and enhancements.
A full list of changes is available in the change log. People interested should also follow the
dev list to track progress.
The POI source release as well as the pre-built binary deployment packages are listed below.
Pre-built versions of all POI components are available in the central Maven repository under
Group ID "org.apache.poi" and Version "3.8-beta5".

2.1. Binary Distribution

poi-bin-3.8-beta5-20111217.tar.gz ( 16MB, signed)

MD5 checksum: fdb02e9f2b9ba8ca1dff737690458f02
SHA1 checksum: c307bef5065a9405b4debf6cf8742a36b0762982
poi-bin-3.8-beta5-20111217.zip ( 23MB, signed)
MD5 checksum: 82fe3895a73f05c408ab1c9b46d38b75

Page 1
Copyright 2002-2011 The Apache Software Foundation All rights reserved.

Apache POI - Download Release Artifacts

SHA1 checksum: b32aca61a51f49c86479bc3a44cf3872e176c8da

2.2. Source Distribution

poi-src-3.8-beta5-20111217.tar.gz ( 43MB, signed)

MD5 checksum: ee3e6dc3d0ff9f7b20da8068b7bf8a65
SHA1 checksum: eac30568824bb958b3858a09ca6838eec6d6eb82
poi-src-3.8-beta5-20111217.zip ( 53MB, signed)
MD5 checksum: e407d026866daafb758f91f74c92b0d9
SHA1 checksum: 1739ad83f954cec3d53ed2a1ba573291a45c9180

3. 29 October 2010 - POI 3.7 available

The Apache POI team is pleased to announce the release of 3.7. Featured are significant
performance improvements and numerous bug fixes. See the full release notes for more
details.
A full list of changes is available in the change log. People interested should also follow the
dev list to track progress.
The POI source release as well as the pre-built binary deployment packages are listed below.
Pre-built versions of all POI components are available in the central Maven repository under
Group ID "org.apache.poi" and Version "3.7".

3.1. Binary Distribution

poi-bin-3.7-20101029.tar.gz ( 14MB, signed)

MD5 checksum: c1f63c1e65fbde7050650ae903c95e5c
poi-bin-3.7-20101029.zip ( 19MB, signed)
MD5 checksum: d353644608f9c1b9e38d9d2b722551c0

3.2. Source Distribution

poi-src-3.7-20101029.tar.gz ( 31MB, signed)

MD5 checksum: 2b93b3254bae7fbebb86fdf95cbd06f2
poi-src-3.7-20101029.zip ( 38MB, signed)
MD5 checksum: a6f80911a6a8b4d3cf97c1550d873e01

4. Verify
It is essential that you verify the integrity of the downloaded files using the PGP or MD5
signatures. Please read Verifying Apache HTTP Server Releases for more information on
why you should verify our releases. This page provides detailed instructions which you can
use for POI artifacts.

Page 2
Copyright 2002-2011 The Apache Software Foundation All rights reserved.

Apache POI - Download Release Artifacts

The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well
as the .asc signature files for the relevant release packages. Make sure you get these files
from the main distribution directory, rather than from a mirror. Then verify the signatures
using
% pgpk -a KEYS
% pgpv poi-X.Y.Z.jar.asc

or
% pgp -ka KEYS
% pgp poi-X.Y.Z.jar.asc

or
% gpg --import KEYS
% gpg --verify poi-X.Y.Z.jar.asc

Sample verification of poi-bin-3.5-FINAL-20090928.tar.gz

% gpg --import KEYS
gpg: key 12DAE9BE: "Glen Stampoultzis <glens at apache dot org>" not changed
gpg: key 4CEED75F: "Nick Burch <nick at gagravarr dot org>" not changed
gpg: key 84B5A42E: "Rainer Klute <rainer.klute at gmx dot de>" not changed
gpg: key F5BB52CD: "Yegor Kozlov <yegor.kozlov at gmail dot com>" not changed
gpg: Total number processed: 4
gpg:
unchanged: 4
% gpg --verify poi-bin-3.5-FINAL-20090928.tar.gz.asc
gpg: Signature made Mon Sep 28 10:28:25 2009 PDT using DSA key ID F5BB52CD
gpg: Good signature from "Yegor Kozlov <yegor.kozlov at gmail dot com>"
gpg:
aka "Yegor Kozlov <yegor at dinom dot ru>"
gpg:
aka "Yegor Kozlov <yegor at apache dot org>"
Primary key fingerprint: 7D77 0C77 6CE7 754E E6AF 23AA 6934 0A02 F5BB 52CD
% gpg --fingerprint F5BB52CD
pub
1024D/F5BB52CD 2007-06-18 [expires: 2012-06-16]
Key fingerprint = 7D77 0C77 6CE7 754E E6AF 23AA 6934 0A02 F5BB 52CD
uid
Yegor Kozlov <yegor.kozlov at gmail dot com>
uid
Yegor Kozlov <yegor at dinom dot ru>
uid
Yegor Kozlov <yegor at apache dot org>
sub
4096g/7B45A98A 2007-06-18 [expires: 2012-06-16]

5. Release Archives
Apache POI became a top level project in June 2007 and POI 3.0 aritfacts were re-released.
Prior to that date POI was a sub-project of Apache Jakarta.
Binary Artifacts

Page 3
Copyright 2002-2011 The Apache Software Foundation All rights reserved.

Apache POI - Download Release Artifacts

Source Artifacts
Keys
Artifacts from prior to 3.0

Page 4
Copyright 2002-2011 The Apache Software Foundation All rights reserved.