The website mentions this towards the end (Replay attacks) : To mitigate this problem, APT archives includes a timestamp after which all the files are considered stale

The time stamp is described here[1], but it is not clear how the expiration date is decided.

1: https://wiki.debian.org/DebianRepository/Format#Date.2C_Vali...