We probably should delete that file in there. It’s unused.
The page also reads:
Release packages are signed with a new key for each major release. The public key is available in the RPM-GPG-KEY-foreman file within each version directory or the foreman-release RPMs.
have you tried those?