# XV-MY-11

Source: https://xmlvalid.com/rules/XV-MY-11

> The signature (ds:SignatureValue) does not verify with the public key of the certificate in the signature over the document digest it states.

- Level: error
- Rule sets: MyInvois validations of LHDN (Malaysia) MyInvois SDK of 25 September 2026
- Context: `/*`
- Test: `not($reference and $value ne '' and $certificate ne '') or js:xvRsaVerify($stated, $value, $certificate) ne 'invalid'`

## Why it fails

- The certificate in `ds:X509Certificate` is not the one whose private key signed.
- The signature was made over another form of the document (with the signature in place, or before the last change) than the digest it states.

Validate a document against these rules: https://xmlvalid.com/validate
