I have received the same error code 401 and it turned out that you need to wait up to 12-24 hours (in my case it was approximately 7 hours) after the creation of the private key until the verification succeeded with 200. Beyond this, you need to create a key for DeviceCheck and not for APN as stated by some examples. APN keys didn't work for me!
Topic:
App & System Services
SubTopic:
General
Tags: