I had the same problem. In my case I found I had to add the content header of application/json when serving the apple-app-site-association. I used https://github.com/ethanhuang13/knil to test on my device. This was the reference: https://kaihao.dev/posts/Extract-pkcs7-signed-data-from-apple-app-site-association-file