signature=d5f5f16865bd07d107fc84d8e109fef5,apt - Invalid signature for Kali Linux repositories : "Th...

This is built in. If you already use Kali's repos, you don't need to get it from an external source:

$ sudo apt install kali-archive-keyring

I'm using a system that adds Kali to a Debian base, so I had to specify the release. You can check that as follows:

$ apt policy kali-archive-keyring

Installed: 2015.2

Candidate: 2015.2

Version table:

2018.1 1

1 http://http.kali.org/kali kali-rolling/main amd64 Packages

1 http://http.kali.org/kali kali-rolling/main i386 Packages

*** 2015.2 100

100 /var/lib/dpkg/status

$ sudo apt install kali-archive-keyring/kali-rolling

This way, you don't have to blindly trust that you're importing the right key in order to prevent a man-in-the-middle attack since the new key is signed by the old one within the repository.

If you don't already have this repository and therefore can't get this update, you have two choices:

1: Go to https://http.kali.org/kali/pool/main/k/kali-archive-keyring/, download the .deb file, and install it via dpkg -i kali-archive-keyring*.deb

2: Add it via the repository anyway (it's "insecure" until you add it):

$ sudo apt update -oAcquire::AllowInsecureRepositories=true

$ sudo apt install kali-archive-keyring

Reading package lists... Done

Building dependency tree

Reading state information... Done

The following NEW packages will be installed:

kali-archive-keyring

0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.

Need to get 7,008 B of archives.

After this operation, 17.4 kB of additional space will be used.

Do you want to continue? [Y/n]

WARNING: The following packages cannot be authenticated!

kali-archive-keyring

Install these packages without verification? [y/N] y

…