The PEM files in this directory are snapshots of the official C2PA Conformance Program trust lists from https://github.com/c2pa-org/conformance-public.
They are bundled so credential trust validation remains local and reproducible. Refresh both files before a release and record the update in the release notes.