carrier-explode iOS carrier and country bundles

Wiki

Notes on iOS carrier bundles: what is in them, how iOS picks one, how they are delivered and signed, and what the modem files inside them do. Written from the bundles this site holds, and where a number can be read from them, read live.

ArticleCovers
.der.griThe global_setting files in the Default bundle - regional baseband tables that apply whatever carrier is in the phone, in Qualcomm and Intel/Apple C1 flavours.
.der.priBaseband override files in iOS carrier bundles: what they hold, the Qualcomm and Intel/Apple C1 formats, and how iOS sends them to the modem.
Bundle SelectionHow iOS gets from a SIM to a carrier bundle, how MVNOs share one, how per-phone overrides and country bundles are layered on top, and which copy wins.
Carrier BundleWhat an iOS carrier bundle is, what is inside one today, where it comes from, and how it is versioned and signed.
Carrier Bundle ManifestThe iTunes version plist that lists every published carrier and country bundle, and the lookup tables in it that turn a SIM into a bundle name.
Carrier.plistThe main settings file of a carrier bundle today: the common keys, the modern APN type-mask bits, and the strange values in current bundles.
Default bundleDefault.bundle - the fallback carrier bundle, and the 18 MB of alert sounds, lookup tables, regional modem tables and motion thresholds that ship in it.
IPCCThe .ipcc file a carrier bundle is shipped in, where Apple hosts them, how they are named and checksummed, and how the URL scheme has changed since 2009.
PRIThe plaintext .pri files in older carrier bundles - CDMA-era baseband settings as a property list, the sections in them, and carrier.prl.
Self-registrationHow Chinese carrier device self-registration shows up in iOS: terminal-registration SMS in carrier bundles and ds_autoreg in Qualcomm modem firmware.

Carriers

What is unusual about the bundles of some of the larger carriers.

ArticleCovers
AT&TWhat is unusual in AT&T's iOS carrier bundle (ATT_US): its sub-brands, per-phone modem files, a Wi-Fi secret unchanged since 2009, and fast eSIM polling.
JioWhat is unusual in Reliance Jio's iOS carrier bundle: Wi-Fi Calling rules for emergency calls, a misspelled key, odd XCAP ports and live ID checks for eSIM.
Rakuten MobileWhat is unusual in Rakuten Mobile's iOS carrier bundle: a 50-minute SIP timer, XCAP over plain HTTP, one-minute emergency alerts, and a misspelled watchOS key.
T-Mobile USWhat is unusual in T-Mobile's iOS carrier bundle: 35 SIM ranges, IoT MVNOs, a lab server in production, text-to-911 test numbers and QuickSwitch.
VerizonWhat is unusual in Verizon's iOS carrier bundle: MVNOs told apart by GID2, mmWave settings, no Wi-Fi handover during 911 calls, and big MMS video.
Vodafone UKWhat is unusual in Vodafone UK's iOS carrier bundle: the only default 5G network slice, captive portal bypasses, and a once-a-day eSIM check.
782 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready