diff --git a/pkg/services/container/ape.go b/pkg/services/container/ape.go
index c57e54d0..d1b490bd 100644
--- a/pkg/services/container/ape.go
+++ b/pkg/services/container/ape.go
@@ -6,6 +6,7 @@ import (
 	"crypto/ecdsa"
 	"crypto/elliptic"
 	"crypto/sha256"
+	"encoding/hex"
 	"errors"
 	"fmt"
 	"strings"
@@ -133,7 +134,7 @@ func (ac *apeChecker) List(ctx context.Context, req *container.ListRequest) (*co
 	}
 
 	reqProps := map[string]string{
-		nativeschema.PropertyKeyActorPublicKey: pk.String(),
+		nativeschema.PropertyKeyActorPublicKey: hex.EncodeToString(pk.Bytes()),
 		nativeschema.PropertyKeyActorRole:      role,
 	}
 
@@ -178,7 +179,7 @@ func (ac *apeChecker) Put(ctx context.Context, req *container.PutRequest) (*cont
 	}
 
 	reqProps := map[string]string{
-		nativeschema.PropertyKeyActorPublicKey: pk.String(),
+		nativeschema.PropertyKeyActorPublicKey: hex.EncodeToString(pk.Bytes()),
 		nativeschema.PropertyKeyActorRole:      role,
 	}
 
@@ -391,7 +392,7 @@ func (ac *apeChecker) getRequestProps(mh *session.RequestMetaHeader, vh *session
 		return nil, err
 	}
 	return map[string]string{
-		nativeschema.PropertyKeyActorPublicKey: pk.String(),
+		nativeschema.PropertyKeyActorPublicKey: hex.EncodeToString(pk.Bytes()),
 		nativeschema.PropertyKeyActorRole:      role,
 	}, nil
 }
diff --git a/pkg/services/container/ape_test.go b/pkg/services/container/ape_test.go
index 5344d9f2..daaacb03 100644
--- a/pkg/services/container/ape_test.go
+++ b/pkg/services/container/ape_test.go
@@ -3,6 +3,7 @@ package container
 import (
 	"context"
 	"crypto/ecdsa"
+	"encoding/hex"
 	"errors"
 	"fmt"
 	"testing"
@@ -524,7 +525,7 @@ func testDenyListContainersForPK(t *testing.T) {
 					{
 						Object: chain.ObjectRequest,
 						Key:    nativeschema.PropertyKeyActorPublicKey,
-						Value:  pk.PublicKey().String(),
+						Value:  hex.EncodeToString(pk.PublicKey().Bytes()),
 						Op:     chain.CondStringEquals,
 					},
 				},