The solution is pretty simple, Microsoft keeps their updated GPG signing key in this file: <
So, one can do for example:
curl -s | sudo apt-key add -
Note: You should not implicitly trust any key (or file for that matter) and inspect the file thoroughly, see this answer for more info. Credit: Stephen Kitt.