There’s an ?exhibit=<exhibit id> GET parameter for browsing items that gets you the items attached to a given exhibit… but this isn’t exposed in the API.
On the SQL side, it’s a multi-level join: the exhibit_block_attachments table records which items are used in each block, exhibit_page_blocks links blocks to their parent pages, and exhibit_pages links each page to its exhibit.