The APC credential uses the same standard Moonshot XML file format as normal Moonshot identities, i.e. the trust router network uses Moonshot to secure itself.

<?xml version="1.0" encoding="UTF-8"?>
<identities>
  <identity>
    <display-name>Trust Router Credential generated at [UNIX timestamp]</display-name>
    <user>[username at the APC]</user>
    <password>[password at the APC]</password>
    <realm>[the APC realm name]</realm>
    <selection-rules>
      <rule>
        <pattern>trustidentity/*</pattern>
        <always-confirm>false</always-confirm>
      </rule>
    </selection-rules>
    <trust-anchor>
      <server-cert>[sha256 fingerprint of APC server certificate or base64 representation of root certificate in DER form]</server-cert>
    </trust-anchor>
  </identity>
</identities>