You can see the list of sites from which packages are loaded by inspecting
/etc/apt/sources.list as well as files in
You can download a package file with
apt-get download, if you want to look inside for some reason. The package files that you installed are kept in
/var/cache/apt/archives until the cache gets purged. The packages are in deb format, not zip. You can use
dpkg-deb or an archive viewer to look inside. If you just want to print the URL and not download the file, you can use
apt-get download --print-uris.
There is rarely any reason to install software without using the package manager, except for software that isn't available as a package. For example, both hostapd and lighttpd are available as packages, so the way to install them is with
apt-get install (or equivalent:
aptitude install, a GUI package manager, …), not with a web browser.