That's a good question.
On the Aura side, the first iteration was with Avaya Aura Web Gateway connected to Session Manager. Basically the mechanism was that, with APN enabled, when you login to Aura with iOS, Avaya Aura Web Gateway would register a 2nd instance of your phone that I would see in Session Manager. When it's time to wake up your phone, the call goes to the AAWG's registered SIP endpoint that sends the message to Spaces to do the Apple Push.
That's how I'd answer your question if it was on enterprise.
Now on enterprise, it's done directly by Session Manager with nothing in between. I haven't tried it yet, but I'd imagine it would retain registration information about your phone. At least insofar as there's a live APN registration. But I haven't looked. I wonder if Monitor and something about it's list of phones would give you better information?
I mean, it has to be in there somewhere that there is a live subscription for this Apple hardware ID referenced to this particular IPO extension and if that extension were to ring, then a push should be sent.
Maybe monitor tracing a push going out would give you some better clues where and what to look for to see if you can find those somewhere.