I am always notified by the console when Apple's APN is about to expire. I also receive emails for it, from Apple. The console doesn't tell me when the DEP token is about to expire, but I do get emails for that from Apple. I just set calendar reminders for myself as soon as I renew or sign any cert for its renewal date.