| trustKey | TrustKey | | [optional] |
| versionNumber | Integer | | [optional] |
| keyHash | String | | [optional] |
| publicKeyMaterial | String | Public verification material only. | [optional] |
| wrappedKeyMaterial | String | Wrapped DEK or encrypted private material. Never raw plaintext key material. | [optional] |
| wrappingKeyRef | String | External KEK, HSM, Vault, Keychain, cloud KMS, password service, or Trust KMS key reference. | [optional] |
| providerKeyRef | String | | [optional] |
| algorithm | AlgorithmEnum | | [optional] |
| versionStatus | VersionStatusEnum | | [optional] |
| notBefore | OffsetDateTime | | [optional] |
| notAfter | OffsetDateTime | | [optional] |
| ownerId | UUID | | [optional] |
| id | UUID | Unique identifier for object in the system | [optional] [readonly] |
| createdDate | OffsetDateTime | Date of object creation | [optional] [readonly] |
| lastAccessedById | UUID | Last user to access object | [optional] [readonly] |
| lastAccessedDate | OffsetDateTime | Timestamp of last access of object | [optional] [readonly] |
| lastModifiedById | UUID | Unique identifier for user who last modifed the object in the system | [optional] [readonly] |
| lastModifiedDate | OffsetDateTime | Date of last object modification | [optional] [readonly] |
| trashed | Boolean | Indicates if the object is trashed (soft deleted) | [optional] |