invoice hash API body does not match the (calculated) Hash of the XML

XML and business rules
1

Dear Team,

One of our customer, submitted a set of B2C invoices in December 2024. Out of these, 12 invoices returned the following validation response from the ZATCA.

Could you please review and advise on the corrective actions we need to take for these affected invoices?

@Ankit.K.Tiwari @idaoud

Error :
“{"validationResults":{"infoMessages":[{"type":"INFO","code":"XSD_ZATCA_VALID","category":"XSD validation","message":"Complied with UBL 2.1 standards in line with ZATCA specifications","status":"PASS"},{"type":"INFO","code":"XSD_ZATCA_VALID","category":"XSD validation","message":"Complied with UBL 2.1 standards in line with ZATCA specifications","status":"PASS"}],"warningMessages":[{"type":"WARNING","code":"invoiceTimeStamp_QRCODE_INVALID","category":"QRCODE_VALIDATION","message":"Time on QR Code does not match with Invoice Issue Time (KSA-25). If ZATCA’s SDK was used to generate QR Code, kindly use the latest version of SDK","status":"WARNING"},{"type":"WARNING","code":"invoiceTimeStamp_QRCODE_INVALID","category":"QRCODE_VALIDATION","message":"Time on QR Code does not match with Invoice Issue Time (KSA-25). If ZATCA’s SDK was used to generate QR Code, kindly use the latest version of SDK","status":"WARNING"},{"type":"WARNING","code":"certificate-issuer-name","category":"CERTIFICATE_ERRORS","message":"X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.","status":"WARNING"},{"type":"WARNING","code":"invalid-signing-certificate","category":"CERTIFICATE_ERRORS","message":"X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.","status":"WARNING"},{"type":"WARNING","code":"certificate-issuer-name","category":"CERTIFICATE_ERRORS","message":"X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.","status":"WARNING"},{"type":"WARNING","code":"invalid-signing-certificate","category":"CERTIFICATE_ERRORS","message":"X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.","status":"WARNING"}],"errorMessages":[{"type":"ERROR","code":"invalid-invoice-hash","category":"INVOICE_HASHING_ERRORS","message":"The invoice hash API body does not match the (calculated) Hash of the XML","status":"ERROR"},{"type":"ERROR","code":"invalid-invoice-hash","category":"INVOICE_HASHING_ERRORS","message":"The invoice hash API body does not match the (calculated) Hash of the XML","status":"ERROR"},{"type":"ERROR","code":"invoiceHash_QRCODE_INVALID","category":"QRCODE_VALIDATION","message":"Invoice xml hash does not match with qr code invoice xml hash","status":"ERROR"},{"type":"ERROR","code":"invoiceHash_QRCODE_INVALID","category":"QRCODE_VALIDATION","message":"Invoice xml hash does not match with qr code invoice xml hash","status":"ERROR"},{"type":"ERROR","code":"certificate-permissions","category":"CERTIFICATE_ERRORS","message":"User only allowed to use the vat number that exists in the authentication certificate","status":"ERROR"},{"type":"ERROR","code":"certificate-permissions","category":"CERTIFICATE_ERRORS","message":"User only allowed to use the vat number that exists in the authentication certificate","status":"ERROR"}],"status":"ERROR"},"reportingStatus":"NOT_REPORTED"}”,
“httpCode”: 400
}

2

Morning @sameer

Thanks for reaching out,

Just to ensure that my understanding is correct, do you mean that other B2C invoices that was submitted have been reported successfully?
If so, then please share some sample for the full request and response to the SP below mail.
If not and all the invoices are rejecting, Then the issue might be in the signing process, so I would kindly ask you to share the exact steps that you are following to sign your actual invoices.

SP mail: sp_support@zatca.gov.sa

Thanks,
Ibrahem Daoud.