Major changes in #Debian's apt 2.9.24:
“apt (2.9.24) unstable; urgency=medium
/etc/apt/trusted.gpg is no longer trusted. Setting the Dir::Etc::trusted option manually continues to work for some more time.
sources.list(5) entries without the Signed-By field are deprecated; migrate any legacy entries to the deb822 .sources format. See the apt-secure(8) manual page for best practices for signer configuration. This deprecates the /etc/apt/trusted.gpg.d directory.”
Run "apt modernize-sources" to update your sources (seems to go smoothly on my machines :) )