I'm sharing a list for Play/iTunes from a recent project we just completed..... Now I'm now sure how this can/may/will change outside of NA and the effects of regional CDN's but the below was a list from like two week back.
netdestination APPLE-ITUNES
name *.apple.com
name *.verisign.com
network 17.0.0.0 255.0.0.0
name *.akamaitechnologies.com
name *.edgekey.net
name *.akadns.net
name *.aaplimg.com
name *.icloud.com
name *.mzstatic.com
name *.itunes.com
name *.akamai.net
name apple.com
netdestination GOOGLE-PLAY
name *.android.clients.google.com
name *.ggpht.com
name *.gstatic.com
name *.accounts.google.com
name *.clients1.google.com
name *.clients2.google.com
name *.clients3.google.com
name *.clients4.google.com
name *.i.ytimg.com
name *.google-analytics.com
name *.android.l.google.com
name *.mtalk.google.com
name *.clients.l.google.com
name *.googleapis.com
name *.play.google.com
name *.1e100.net
name *.gvt1.com
name *.l.googleusercontent.com
name *.ggpht.net
name android.clients.google.com
name ggpht.com
name gstatic.com
name accounts.google.com
name clients1.google.com
name clients2.google.com
name clients3.google.com
name clients4.google.com
name i.ytimg.com
name google-analytics.com
name android.l.google.com
name mtalk.google.com
name clients.l.google.com
name googleapis.com
name play.google.com
name 1e100.net
name gvt1.com
name l.googleusercontent.com
name ggpht.net
HTH