Current Behavior
yum install -y apisix is failing due to a GPG signature verification error. Disabling GPG signature verification is a viable workaround. One of the GPG keys downloaded from https://repos.apiseven.com/KEYS expired on 08 July 2026.
# curl -LOSs https://repos.apiseven.com/KEYS
# gpg --list-options show-sig-expire --import-options show-only --import KEYS
pub rsa4096 2021-01-20 [SC]
3CCCEC586D4F1D2635A992429097DDAE79882014
uid Joey Ma (GPG Key) <majunjie@apache.org>
sub rsa4096 2021-01-20 [E]
pub rsa4096 2021-11-10 [SC]
713F1A8F45E02766DBBABD64B44C2B6296C07346
uid APISIX Publisher <dev@apisix.apache.org>
sub rsa4096 2021-11-10 [E]
pub rsa3072 2022-07-08 [SC] [expired: 2024-07-07]
22E179579FBD69F3812094DCA85CD39D7F829327
uid zhaoshirui <shirui@api7.ai>
pub rsa3072 2024-07-08 [SC] [expired: 2026-07-08]
1580F1E689851C11EC61590D76A23BCCEF915680
uid chenjunxu <chenjunxu@api7.ai>Expected Behavior
No response
Error Logs
No response
Steps to Reproduce
[root@9b84a45de1de /]# cat << EOF > /etc/yum.repos.d/apache-apisix.repo
> [release]
> name=Apache APISIX Repository for Redhat
> baseurl=https://repos.apiseven.com/packages/redhat/\$releasever/\$basearch
> skip_if_unavailable=False
> gpgcheck=1
> repo_gpgcheck=1
> gpgkey=https://repos.apiseven.com/KEYS
> enabled=1
> enabled_metadata=1
> EOF
[root@9b84a45de1de /]# yum update -y && yum install -y apisix
Apache APISIX Repository for Redhat 324 B/s | 659 B 00:02
Apache APISIX Repository for Redhat 9.0 kB/s | 11 kB 00:01
Importing GPG key 0x79882014:
Userid : "Joey Ma (GPG Key) <majunjie@apache.org>"
Fingerprint: 3CCC EC58 6D4F 1D26 35A9 9242 9097 DDAE 7988 2014
From : https://repos.apiseven.com/KEYS
Importing GPG key 0x96C07346:
Userid : "APISIX Publisher <dev@apisix.apache.org>"
Fingerprint: 713F 1A8F 45E0 2766 DBBA BD64 B44C 2B62 96C0 7346
From : https://repos.apiseven.com/KEYS
Importing GPG key 0x7F829327:
Userid : "zhaoshirui <shirui@api7.ai>"
Fingerprint: 22E1 7957 9FBD 69F3 8120 94DC A85C D39D 7F82 9327
From : https://repos.apiseven.com/KEYS
Importing GPG key 0xEF915680:
Userid : "chenjunxu <chenjunxu@api7.ai>"
Fingerprint: 1580 F1E6 8985 1C11 EC61 590D 76A2 3BCC EF91 5680
From : https://repos.apiseven.com/KEYS
Apache APISIX Repository for Redhat 1.6 kB/s | 659 B 00:00
Error: Failed to download metadata for repo 'release': repomd.xml GPG signature verification error: Bad GPG signature
Disabling GPG signature verification is a viable workaround.
[root@9b84a45de1de /]# cat << EOF > /etc/yum.repos.d/apache-apisix.repo
> [release]
> name=Apache APISIX Repository for Redhat
> baseurl=https://repos.apiseven.com/packages/redhat/\$releasever/\$basearch
> skip_if_unavailable=False
> gpgcheck=0
> repo_gpgcheck=0
> gpgkey=https://repos.apiseven.com/KEYS
> enabled=1
> enabled_metadata=1
> EOF
[root@9b84a45de1de /]# yum update -y 2>&1 >/dev/null
[root@9b84a45de1de /]# yum install -y apisix
Last metadata expiration check: 0:00:39 ago on Fri Jul 10 17:46:45 2026.
Dependencies resolved.
======================================================================================================================================================
Package Architecture Version Repository Size
======================================================================================================================================================
Installing:
apisix x86_64 3.17.0-0.ubi9.6 release 52 M
Installing dependencies:
cyrus-sasl x86_64 2.1.27-22.el9 sas-rhel-9-baseos 71 k
cyrus-sasl-devel x86_64 2.1.27-22.el9 sas-rhel-9-appstream 111 k
libpkgconf x86_64 1.7.3-10.el9 sas-rhel-9-baseos 37 k
libyaml-devel x86_64 0.2.5-7.el9 sas-rhel-9-codeready 165 k
openldap-devel x86_64 2.6.8-4.el9 sas-rhel-9-appstream 750 k
pkgconf x86_64 1.7.3-10.el9 sas-rhel-9-baseos 45 k
pkgconf-m4 noarch 1.7.3-10.el9 sas-rhel-9-baseos 16 k
pkgconf-pkg-config x86_64 1.7.3-10.el9 sas-rhel-9-baseos 12 k
Transaction Summary
======================================================================================================================================================
Install 9 Packages
Total download size: 53 M
Installed size: 205 M
Downloading Packages:
(1/9): libpkgconf-1.7.3-10.el9.x86_64.rpm 171 kB/s | 37 kB 00:00
(2/9): pkgconf-1.7.3-10.el9.x86_64.rpm 202 kB/s | 45 kB 00:00
(3/9): pkgconf-m4-1.7.3-10.el9.noarch.rpm 1.1 MB/s | 16 kB 00:00
(4/9): pkgconf-pkg-config-1.7.3-10.el9.x86_64.rpm 752 kB/s | 12 kB 00:00
(5/9): cyrus-sasl-2.1.27-22.el9.x86_64.rpm 2.5 MB/s | 71 kB 00:00
(6/9): cyrus-sasl-devel-2.1.27-22.el9.x86_64.rpm 5.5 MB/s | 111 kB 00:00
(7/9): openldap-devel-2.6.8-4.el9.x86_64.rpm 12 MB/s | 750 kB 00:00
(8/9): libyaml-devel-0.2.5-7.el9.x86_64.rpm 8.7 MB/s | 165 kB 00:00
(9/9): apisix-3.17.0-0.ubi9.6.x86_64.rpm 977 kB/s | 52 MB 00:54
------------------------------------------------------------------------------------------------------------------------------------------------------
Total 998 kB/s | 53 MB 00:54
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: cyrus-sasl-2.1.27-22.el9.x86_64 1/9
Installing : cyrus-sasl-2.1.27-22.el9.x86_64 1/9
Running scriptlet: cyrus-sasl-2.1.27-22.el9.x86_64 1/9
Installing : pkgconf-m4-1.7.3-10.el9.noarch 2/9
Installing : libpkgconf-1.7.3-10.el9.x86_64 3/9
Installing : pkgconf-1.7.3-10.el9.x86_64 4/9
Installing : pkgconf-pkg-config-1.7.3-10.el9.x86_64 5/9
Installing : cyrus-sasl-devel-2.1.27-22.el9.x86_64 6/9
Installing : openldap-devel-2.6.8-4.el9.x86_64 7/9
Installing : libyaml-devel-0.2.5-7.el9.x86_64 8/9
Installing : apisix-3.17.0-0.ubi9.6.x86_64 9/9
Running scriptlet: apisix-3.17.0-0.ubi9.6.x86_64 9/9
Verifying : apisix-3.17.0-0.ubi9.6.x86_64 1/9
Verifying : libpkgconf-1.7.3-10.el9.x86_64 2/9
Verifying : pkgconf-1.7.3-10.el9.x86_64 3/9
Verifying : pkgconf-m4-1.7.3-10.el9.noarch 4/9
Verifying : pkgconf-pkg-config-1.7.3-10.el9.x86_64 5/9
Verifying : cyrus-sasl-2.1.27-22.el9.x86_64 6/9
Verifying : openldap-devel-2.6.8-4.el9.x86_64 7/9
Verifying : cyrus-sasl-devel-2.1.27-22.el9.x86_64 8/9
Verifying : libyaml-devel-0.2.5-7.el9.x86_64 9/9
Installed products updated.
Installed:
apisix-3.17.0-0.ubi9.6.x86_64 cyrus-sasl-2.1.27-22.el9.x86_64 cyrus-sasl-devel-2.1.27-22.el9.x86_64 libpkgconf-1.7.3-10.el9.x86_64
libyaml-devel-0.2.5-7.el9.x86_64 openldap-devel-2.6.8-4.el9.x86_64 pkgconf-1.7.3-10.el9.x86_64 pkgconf-m4-1.7.3-10.el9.noarch
pkgconf-pkg-config-1.7.3-10.el9.x86_64
Complete!
Environment
- APISIX version (run
apisix version): 3.17.0 (or any version)
- Operating system (run
uname -a): Linux 9b84a45de1de 6.6.119-0-virt #1-Alpine SMP PREEMPT_DYNAMIC 2025-12-10 08:04:08 x86_64 x86_64 x86_64 GNU/Linux
- OpenResty / Nginx version (run
openresty -V or nginx -V): not relevant
- etcd version, if relevant (run
curl http://127.0.0.1:9090/v1/server_info): not relevant
- APISIX Dashboard version, if relevant: not relevant
- Plugin runner version, for issues related to plugin runners: not relevant
- LuaRocks version, for installation issues (run
luarocks --version): not relevant
Current Behavior
yum install -y apisixis failing due to a GPG signature verification error. Disabling GPG signature verification is a viable workaround. One of the GPG keys downloaded fromhttps://repos.apiseven.com/KEYSexpired on 08 July 2026.Expected Behavior
No response
Error Logs
No response
Steps to Reproduce
Disabling GPG signature verification is a viable workaround.
Environment
apisix version): 3.17.0 (or any version)uname -a):Linux 9b84a45de1de 6.6.119-0-virt #1-Alpine SMP PREEMPT_DYNAMIC 2025-12-10 08:04:08 x86_64 x86_64 x86_64 GNU/Linuxopenresty -Vornginx -V): not relevantcurl http://127.0.0.1:9090/v1/server_info): not relevantluarocks --version): not relevant