Application File Locator (AFL)
The chip card's table of contents: which records the terminal should read, and which of them belong to the signed data.
The AFL sits in tag 94 and arrives alongside the AIP in the response to GET PROCESSING OPTIONS. It is made of four-byte entries. Each one names a file on the card (the SFI, short file identifier), the first and last record to read, and how many of those records count towards offline data authentication. The terminal works down the list with one READ RECORD command per record, collecting the card number, expiry date, certificates, CVM list and CDOL.
It sounds like bureaucracy, and it is. But that last number is what decides what the issuer's signature actually covers. Records outside the count can, in principle, be altered without any signature check noticing.