Could each box have a short lived leaf certificate signed by an Apple intermediate/root?

Also they could just be signing content at the application layer like APT does, and the transport is plain HTTP.