# Get a single public key

Returns a single public key by ID, including the PEM-encoded SubjectPublicKeyInfo.

Endpoint: GET /resources/tenants/api-tokens/v1/{apiTokenId}/public-keys/{keyId}
Version: 1.0
Security: bearer

## Path parameters:

  - `apiTokenId` (string, required)

  - `keyId` (string, required)

## Header parameters:

  - `frontegg-tenant-id` (string, required)
    The tenant ID identifier

## Response 200 fields (application/json):

  - `id` (string, required)

  - `apiTokenId` (string, required)

  - `kid` (string, required)

  - `algorithm` (string, required)

  - `name` (string,null, required)

  - `publicKeyFingerprint` (string, required)
    SHA-256 hex fingerprint of the SubjectPublicKeyInfo DER

  - `isActive` (boolean, required)

  - `expiresAt` (string,null, required)

  - `createdByUserId` (string,null, required)

  - `createdAt` (string, required)

  - `updatedAt` (string, required)

  - `publicKeyPem` (string, required)
    PEM-encoded public key (SubjectPublicKeyInfo)