The following signatures were invalid: EXPKEYSIG CF9AAE63E5517864 Pathvector Code Signing Key

[yoursunny]

Describe the bug

The repository signing key https://repo.pathvector.io/pgp.asc has expired.

Environment

Debian 12

To Reproduce

docker run --rm debian:bookworm sh -c '
  apt update &&
  apt install -y ca-certificates curl &&
  curl https://repo.pathvector.io/pgp.asc > /usr/share/keyrings/pathvector.asc &&
  echo "deb [signed-by=/usr/share/keyrings/pathvector.asc] https://repo.pathvector.io/apt/ stable main" > /etc/apt/sources.list.d/pathvector.list &&
  apt update &&
  apt install -y pathvector
'

Or type the installation commands into a Debian 12 machine.

Expected behavior

Pathvector is installed successfully.

Actual behavior

Hit:1 http://deb.debian.org/debian bookworm InRelease
Hit:2 http://deb.debian.org/debian bookworm-updates InRelease
Hit:3 http://deb.debian.org/debian-security bookworm-security InRelease
Get:4 https://repo.pathvector.io/apt stable InRelease [3349 B]
Err:4 https://repo.pathvector.io/apt stable InRelease
  The following signatures were invalid: EXPKEYSIG CF9AAE63E5517864 Pathvector Code Signing Key <[email protected]>
Reading package lists...
W: GPG error: https://repo.pathvector.io/apt stable InRelease: The following signatures were invalid: EXPKEYSIG CF9AAE63E5517864 Pathvector Code Signing Key <[email protected]>
E: The repository 'https://repo.pathvector.io/apt stable InRelease' is not signed.

Analysis

https://repo.pathvector.io/pgp.asc contents:

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=EHN/
-----END PGP PUBLIC KEY BLOCK-----

Using GPG decoder:

    length:"5"
    subpacketType:"Signature Creation Time (0x2)"
    creationTime:"Sat Jul 24 2021 07:06:06 GMT+0000 (Coordinated Universal Time)"

    length:"5"
    subpacketType:"Key Expiration Time (0x9)"
    data:"03c26700"
    length:"5"

SignatureCreationTime + KeyExpirationTime is Monday, July 24, 2023 7:06:06.

[natesales]

Key has been updated. curl https://repo.pathvector.io/pgp.asc -o /usr/share/keyrings/pathvector.asc