for app id 2561608 i can confirm the mobile provision is not linked to the uploaded signing key. if making a new signing key you have to re-link any mobile provisions to the new key and re-upload the new downloaded mobile certificate.
APN certificate is for sending Push notifications, not for signing apps.
The new certificate you have to create is a "Production" certificate selecting "App Store and Ad Hoc" option, and then generate a new "Distribution" provisioning profile, then choose "App Store" or "Ad Hoc" depending on if you want to publish it on the store or distribute it for tester outside TestFlight, and finally select the "Production" certificate you created.
Thank you, will check this out with our team and try this. Will reply back when it this works