EXPKEYSIG debian ubuntu

Fix EXPKEYSIG ABF5BD827BD9BF62

nginx signing key <signing-key@nginx.com> — by NGINX

Error message
EXPKEYSIG ABF5BD827BD9BF62 nginx signing key <signing-key@nginx.com>

Fix commands for RHEL / CentOS / AlmaLinux

Method 1 Import from official URL

Directly imports the GPG key from the vendor URL into the RPM database.

RHEL / CentOS / AlmaLinux — bash
$ sudo rpm --import https://nginx.org/keys/nginx_signing.key
$ sudo yum check-update || sudo dnf check-update

Method 2 Import via GnuPG then rpm

Compatible with RHEL, CentOS, AlmaLinux and Rocky Linux (both yum and dnf).

RHEL / CentOS / AlmaLinux — bash
$ gpg --keyserver hkps://keys.openpgp.org --recv-keys ABF5BD827BD9BF62
$ gpg --export --armor ABF5BD827BD9BF62 | sudo rpm --import -
$ sudo yum check-update || sudo dnf check-update

After importing the key

Run sudo apt-get update (or your distro's equivalent) again. If successful you should see Hit: lines with no EXPKEYSIG warnings. Still broken? Check that your /etc/apt/sources.list.d/ entry references the correct [signed-by=…] keyring path.