Crazy that there's an error that is not documented. Anyhow, I think I got this because I was using a p8-file that was for production only but a device token generated for development environment. Fix: re-generate a p8-file for both development and production. Update APNS_KEY_PATH and APNS_KEY_ID accordingly.