carrier-explode iOS carrier and country bundles
782 of 782
CMCC_hkHK HongKong country bundle
  1. iOS 27.0 image · build 72.0
  2. iOS 26.5 – 26.6.2 image · build 70.0shown
  3. iOS 26.4 – 26.4.2 image · build 69.0
  4. iOS 26.3 – 26.3.1 image · build 68.0
  5. iOS 26.2 – 26.2.1 image · build 67.0
  6. iOS 26.1 image · build 66.0
  7. iOS 26.0 – 26.0.1 image · build 65.0
  8. OTA · iOS 11.3+ · build 32.1
  9. OTA · iOS 10.2+ · build 27.1
  10. OTA · iOS 9.3+ · build 24.1
  11. OTA · iOS 9.2+ · build 23.1
  12. OTA · iOS 9.0+ · build 21.1
  13. OTA · iOS 7.1+ · build 16.3
  14. OTA · iOS 7.0+ · build 15.6
  15. OTA · iOS 14.3+ · build 45.3 · iPad
  16. OTA · iOS 10.2+ · build 28.3 · iPad
iOS 26.5 – 26.6.2 image · build 70.0 (16)
  1. iOS 27.0 image · build 72.0
  2. iOS 26.5 – 26.6.2 image · build 70.0shown
  3. iOS 26.4 – 26.4.2 image · build 69.0
  4. iOS 26.3 – 26.3.1 image · build 68.0
  5. iOS 26.2 – 26.2.1 image · build 67.0
  6. iOS 26.1 image · build 66.0
  7. iOS 26.0 – 26.0.1 image · build 65.0
  8. OTA · iOS 11.3+ · build 32.1
  9. OTA · iOS 10.2+ · build 27.1
  10. OTA · iOS 9.3+ · build 24.1
  11. OTA · iOS 9.2+ · build 23.1
  12. OTA · iOS 9.0+ · build 21.1
  13. OTA · iOS 7.1+ · build 16.3
  14. OTA · iOS 7.0+ · build 15.6
  15. OTA · iOS 14.3+ · build 45.3 · iPad
  16. OTA · iOS 10.2+ · build 28.3 · iPad
All files overrides_D93_D94_D47_D48.plist
plist 5.3 KiB D93 iPhone 16 ProD94 iPhone 16 Pro MaxD47 iPhone 16D48 iPhone 16 Plus Save Raw
DerPriFileVersion = "5.0.161"
Show5GWarningUnsupportedCarrier = false
Show5GStandaloneSwitch = true
_Exclude [] 1
[0] = "EnableLTEAfterUpgrade"
IgnoresDeactivateOnNetworkScanServiceMask = 131072 bits 17 · 0x20000
ShowHighDataModeSwitch = true
AllowedServicesTypeMaskOnInternet = 32768 bits 15 · 0x8000
SMSSettings {} 1
TransportFallback = true
ShowVolteWarningUnsupportedCarrier = false
Show5GSwitch = true
IMSConfig {} 7
IMS (VoLTE / Wi-Fi Calling) stack configuration: SIP signalling, media/SRTP, registration and headers.
Signaling {} 25
IgnoreRegNotificationContactExpires = true
AdditionalContactParams {} 1
DefaultAuthAlgorithm = "AKAv1-MD5"
ussdEnabled = true
RegistrationRetryIntervals = "64"
SupportPEarlyMediaHeader = true
UseFakeSAsForDeregistration = true
KillRegistrationOnHandoverTimeout = false
EarlyMediaNeedsHeader = true
SipTimers {} 1
AllowResponsesOverDifferentTransport = false
InviteErrorResponsesToTriggerCSFB = ""
AllowEarlyMediaToOverrideLocalRingback = true
MaxUdpMessageSize = 1200
AlwaysAddPrivacyHeader = true
CountryOfOriginationFormat = "PANI"
RequirePreconditionsWhenMandatory = false
IncomingCallEndReasons {} 1
EnableCellularNetworkInfo = true
IncompleteRegistrationThrottlingIntervalSeconds = 0
CallEndReasons {} 1
Preconditions = "None"
RingingTimerSeconds = 120
MinSessionExpiresSeconds = 600
UseIPSec = true
ConferenceCalling {} 1
conferenceServer = "sip:conference@conference.ims.cmhk.net"
AllowHandoverWithoutIMSVoiceService = true
SMS {} 3
enableInNonVoLTEMode = false
SupportedDomains {} 1
allowCSFBInVolteMode = true
XCAP {} 14
NafHost = "xcap.ims.mnc012.mcc454.pub.3gppnetwork.org"
SupportsCB = true
imsFeatureDependency = true
NafPort = 80
SupportsCLIR = false
SupportCFMediaTag = true
supported = true
ContentType = "application/vnd.etsi.simservs+xml"
DisableOnNetworkError = true
ForbiddenHttpErrorCodes = ""
SupportsCFErasure = false
imsRegistrationDependency = true
CallBarringNASFallbackSupported = true
SupportsCW = true
Media {} 1
IncludeSDPModeChangeCapability = true
Voice {} 3
DialAsEmergencyOverIMSForUndetectedEmergency = true
E911OverITechSupported = true
EnableVolteByDefault = true
OverrideOperatorWiFiName = "CMHK WiFi Call"
DerPriFileName = "overrides_D93_D94_D47_D48.der.pri"
Binary baseband PRI (.der.pri) this override plist pairs with.
CarrierEntitlements {} 5
Server that gates carrier features (Wi-Fi Calling, tethering, Watch plans). SupportedEntitlements is a bitmask of which entitlement classes are queried.
SupportedEntitlements = 1153 bits 0, 7, 10 · 0x481
Bitmask of entitlement classes the device may request from the entitlement server. Individual bit meanings are not published.
ServerAddress = "https://ses.hk.chinamobile.com"
Authentication {} 2
Type = 1
Username = "0$IMSI@nai.epc.mnc$MNC.mcc$MCC.3gppnetwork.org"
ProvisioningRecheckPeriod = 3
UpdatePeriod = 24
ShowWiFiCallingWarningUnsupportedCarrier = false
AttachAPN {} 1
The APN attached at LTE/NR registration, before any user-selected APN.
3GPP {} 5
password = ""
PcscfAddressRequired = false
username = ""
apn = "CMHK"
AllowedProtocolMask = 1 bits 0 · 0x1
SupportsImsCapability = true
ShowVolteSwitch = false
Enable5GAutoByDefault = true
RemoteCardProvisioningSettings {} 9
eSIM download settings: SM-DP+ hostnames, ICCID prefixes that match this carrier, and whether an Apple ID check is required.
MatchingICCIDPrefixes [] 1
ICCID prefixes that route an eSIM download to this carrier.
[0] = "8985212"
InconsistentICCIDLength = true
ServerURL = "https://peo.prod.ondemandconnectivity.com"
ActivatingStateSubscriptionCheckTimerIntervals [] 3
[0] = 180
[1] = 360
[2] = 540
MinCompatibleWatchOS = "4.3.0"
SupportedSKUs [] 1
[0] = "SKU_EU"
ProvisioningMethod = "CarrierFlow"
SupportsFauxCard = false
UsesAutoAssignment = false
SupportsNRNSAInboundRoaming = true
TechSettings {} 11
Low-level radio/EPDG behaviour, including IKE and Wi-Fi Calling policy.
WifiCallingAllowedInRoaming = false
ChildSAs {} 1
FirstChild {} 3
iRatPolicies {} 2
PreferredTechnology = "wifi"
PreferredTechnologyRoaming = "wifi"
ExtraConfigurationAttributeRequestv4 [] 1
[0] {} 3
ExtraConfigurationAttributeRequestv6 [] 1
[0] {} 3
SupportContextSwitchOver = true
SupportCallHandover = true
TechPolicies [] 2
[0] {} 2
[1] {} 2
IKE {} 9
Proposals [] 1
DeadPeerDetectionEnabled = false
DeadPeerDetectionMaxRetries = 4
DeadPeerDetectionInterval = 600
LocalIdentifier = "0$imsi@nai.epc.mnc$mnc.mcc$mcc.3gppnetwork.org"
NATTKeepAliveOffload = true
ValidateRemoteCertificate = false
RemoteAddress = "epdg.epc.mnc012.mcc454.pub.3gppnetwork.org"
DeadPeerDetectionRetryInterval = 10
SetHandOverIPv6Prefix = false
5wiServiceMask = 3
PushSettings {} 2
MultiSIMTopic = "com.chinamobile.hk.ent.multi-sim"
VoWiFiTopic = "com.chinamobile.hk.ent.vowifi"
apns [] 4
Access Point Names. Each entry carries a type-mask (which services may use it) and a tech-type-mask (which radio technologies).
[0] {} 4
password = ""
username = ""
apn = "cmhk"
type-mask = 32821 bits 0, 2, 4, 5, 15 · 0x8035
Bitmask of service classes allowed on this APN (internet, MMS, tethering, IMS, …).
[1] {} 9
type-mask = 131072 bits 17 · 0x20000
Bitmask of service classes allowed on this APN (internet, MMS, tethering, IMS, …).
password = ""
tech-type-mask = 131072 bits 17 · 0x20000
Bitmask of radio technologies this APN entry applies to.
Support5GSaHandOver = true
AllowedProtocolMask = 1 bits 0 · 0x1
SupportSwitchOver = true
username = ""
apn = "ims"
DefaultProtocolMask = 1
[2] {} 4
password = ""
username = ""
apn = "cmhk"
type-mask = 32820 bits 2, 4, 5, 15 · 0x8034
Bitmask of service classes allowed on this APN (internet, MMS, tethering, IMS, …).
[3] {} 5
password = ""
tech-type-mask = 1048576 bits 20 · 0x100000
Bitmask of radio technologies this APN entry applies to.
username = ""
apn = "XCAP"
type-mask = 1048576 bits 20 · 0x100000
Bitmask of service classes allowed on this APN (internet, MMS, tethering, IMS, …).
782 carriers, 225 countries · iOS 27.0 (24A437) CMCC_hk GitHub Ready