there's not two addresses in a multisig, there is one address, signed for with multiple keys

when that multisig output is spent those keys are revealed, but thats not the same as your extended pubkey... the derivation path is how basically you have infinite uncorrelated public keys from one true signing key