diff --git a/etc/mtree/BSD.usr.dist b/etc/mtree/BSD.usr.dist
--- a/etc/mtree/BSD.usr.dist
+++ b/etc/mtree/BSD.usr.dist
@@ -477,6 +477,11 @@
                 ..
                 trusted         tags=package=runtime
                 ..
+            pkgbase-15
+                revoked         tags=package=runtime
+                ..
+                trusted         tags=package=runtime
+                ..
             ..
         ..
         kyua            tags=package=tests
diff --git a/share/keys/Makefile b/share/keys/Makefile
--- a/share/keys/Makefile
+++ b/share/keys/Makefile
@@ -1,3 +1,3 @@
-SUBDIR= pkg
+SUBDIR= pkg pkgbase-15
 
 .include <bsd.subdir.mk>
diff --git a/share/keys/Makefile b/share/keys/pkgbase-15/Makefile
copy from share/keys/Makefile
copy to share/keys/pkgbase-15/Makefile
--- a/share/keys/Makefile
+++ b/share/keys/pkgbase-15/Makefile
@@ -1,3 +1,3 @@
-SUBDIR= pkg
+SUBDIR=	trusted
 
 .include <bsd.subdir.mk>
diff --git a/share/keys/pkgbase-15/trusted/Makefile b/share/keys/pkgbase-15/trusted/Makefile
new file mode 100644
--- /dev/null
+++ b/share/keys/pkgbase-15/trusted/Makefile
@@ -0,0 +1,8 @@
+PACKAGE=	pkg-bootstrap
+
+FILES=	awskms-15
+
+FILESDIR=	${SHAREDIR}/keys/pkgbase-15/trusted
+FILESMODE=	644
+
+.include <bsd.prog.mk>
diff --git a/share/keys/pkgbase-15/trusted/awskms-15 b/share/keys/pkgbase-15/trusted/awskms-15
new file mode 100644
--- /dev/null
+++ b/share/keys/pkgbase-15/trusted/awskms-15
@@ -0,0 +1,2 @@
+function: "sha256"
+fingerprint: "1d7b45d20fa8d6ed26f9b4a13ac81a6b5df860b9fe644d07b87e92298ba72595"