I've looked at the requirements for ASF projects regarding use of
cryptography as well as required disclosures. I have sent (under a
separate e-mail) notifying the various entities about our status as
an exporter.
As I'm compiling the release procedures with Sachin and Jacek (thanks
for volunteering :) we'll make sure to include the additional
requirements in the release process.
Here is a page that identifies the exporters and their (very general
links) to said technology. Not sure when the mirrors will pick up
the updates.
http://www.apache.org/licenses/exports/
Cheers.