diff --git a/data/schema/KEY-CERT-SCHEMA b/data/schema/KEY-CERT-SCHEMA
index b2c3ca486..9d5a9b5e0 100644
--- a/data/schema/KEY-CERT-SCHEMA
+++ b/data/schema/KEY-CERT-SCHEMA
@@ -12,6 +12,6 @@ key:                tech-c       optional  multiple  lookup=dn42.person,dn42.rol
 key:                mnt-by       required  multiple  lookup=dn42.mntner
 key:                source       required  single
 primary-match:      PGPKEY-[0-9A-F]{8}
-                    MTN-[0-9A-Z-]{1,58}
+primary-match:      MTN-[0-9A-Z-]{1,58}
 mnt-by:             DN42-MNT
 source:             DN42
diff --git a/data/schema/SCHEMA-SCHEMA b/data/schema/SCHEMA-SCHEMA
index 86e993749..6bf07ba1f 100644
--- a/data/schema/SCHEMA-SCHEMA
+++ b/data/schema/SCHEMA-SCHEMA
@@ -14,7 +14,7 @@ key:                mnt-by           required multiple   lookup=dn42.mntner > [m
 key:                remarks          optional multiple > [text]...
 key:                source           required single     lookup=dn42.registry
 key:                network-owner    optional multiple > [parent-schema]
-key:                primary-match    optional single   > [match]...
+key:                primary-match    required multiple > [match]
 key:                key              required multiple > [key-name]
                     {required|optional|recommend|deprecate}
                     {single|multiple} {primary|} {schema|}