ContainerApp codesign output:
devs-iMac:Applications dev$ codesign -d --entitlements - SampleSysExtHost.app

Executable=/Applications/SampleGUI.app/Contents/Applications/SampleSysExtHost.app/Contents/MacOS/SampleSysExtHost




	com.apple.application-identifier
	[Team ID].[APP_ID]
	com.apple.developer.networking.networkextension
	
		app-proxy-provider-systemextension
	
	com.apple.developer.system-extension.install
	
	com.apple.developer.team-identifier
	[Team ID]
	com.apple.security.get-task-allow
	




ContainerApp provisioning profile output:

devs-iMac:Contents dev$ security cms -D -i embedded.provisionprofile 





	AppIDName
	[Profile AppID Name]
	ApplicationIdentifierPrefix
	
	[TEAM_ID]
	
	CreationDate
	[DATE]
	Platform
	
		OSX
	
	IsXcodeManaged
	
	DeveloperCertificates
	
		<data>[DATA]</data>
									
	Entitlements
	
				
				com.apple.developer.system-extension.install
		
				
				com.apple.developer.networking.networkextension
		
				packet-tunnel-provider-systemextension
				app-proxy-provider-systemextension
				content-filter-provider-systemextension
				dns-proxy-systemextension
				dns-settings
		
				
				com.apple.application-identifier
		[TEAM_ID].[APP_ID]
				
				keychain-access-groups
		
				[TEAM_ID].*
		
				
				com.apple.developer.team-identifier
		[TEAM_ID]

	
	ExpirationDate
	[DATE
	Name
	[PROFILE NAME]
	ProvisionsAllDevices
	
	TeamIdentifier
	
		[TEAM_ID]
	
	TeamName
	[TEAM_NAME]
	TimeToLive
	6570
	UUID
	[UUID]
	Version
	1






System extension codesign output:

devs-iMac:SystemExtensions dev$ codesign -d --entitlements - my.sysext.bundleid.systemextension





	com.apple.application-identifier
	[Team ID].[APP_ID]
	com.apple.developer.networking.networkextension
	
		app-proxy-provider-systemextension
	
	com.apple.developer.team-identifier
	[Team ID]
	com.apple.security.application-groups
	
		[Team ID].com.test.appgroup
	
	com.apple.security.get-task-allow
	




System extension provisioning profile output:
devs-iMac:Contents dev$ security cms -D -i embedded.provisionprofile





	AppIDName
	[NAME]
	ApplicationIdentifierPrefix
	
	[TEAM_ID]
	
	CreationDate
	[DATE]
	Platform
	
		OSX
	
	IsXcodeManaged
	
	DeveloperCertificates
	
		<data>[DATA]</data>
								
	Entitlements
	
				
				com.apple.developer.networking.networkextension
		
				packet-tunnel-provider-systemextension
				app-proxy-provider-systemextension
				content-filter-provider-systemextension
				dns-proxy-systemextension
				dns-settings
		
				
				com.apple.application-identifier
		[TEAM_ID].[APP_ID]
				
				keychain-access-groups
		
				[TEAM_ID].*
		
				
				com.apple.developer.team-identifier
		[TEAM_ID]

	
	ExpirationDate
	[DATE]
	Name
	[PROFILE_NAME]
	ProvisionsAllDevices
	
	TeamIdentifier
	
		[TEAM_ID]
	
	TeamName
	[TEAM_NAME]
	TimeToLive
	6570
	UUID
	[UUID]
	Version
	1