Legit. That also makes sense, since the keyring ACCEPTED the key. Both apt-key and gpg --list-keys --keyring ... show the key and don’t complain about it at all.
But apt itself simply balks at it.
ETA: For funzies, I also went old-school and used apt-get instead of just apt. Same result.