A China CNC factory sends you a scanned AS9100D certificate. It looks official — letterhead, logo, signature, certification mark. But is it real? Is it current? Does the scope actually cover the process you need? This page gives you a repeatable 3-step verification workflow that eliminates forged, expired, and out-of-scope certificates before they cost you a rejected shipment or an OEM audit finding.
AS9100 (currently Revision D, published 2016; Revision E expected 2026) is the aerospace quality management system standard based on ISO 9001 with additional aviation-specific requirements. It is the single most common QMS gate for aerospace supply chains — Boeing, Airbus, GE Aviation, Rolls-Royce, and their Tier 1 suppliers all require it. But unlike ISO 9001, which has hundreds of certification bodies, AS9100 certification is tightly controlled: only IAQG-recognized certification bodies can issue valid certificates, and every certified organization must be listed in the OASIS database (Online Aerospace Supplier Information System) managed by IAQG.
The problem: enforcement is decentralized. A supplier can Photoshop a certificate, use an expired certificate from a previous audit, or hold a certificate from a non-IAQG-recognized body that is essentially worthless. The consequences of accepting a fake or invalid certificate include: rejected lots, OEM audit findings, potential FAA/EASA regulatory action, and in the worst case, a field safety incident traced back to an unqualified supplier.
The OASIS database is the single source of truth for AS9100 certification status. Every valid AS9100 certificate — without exception — must be registered in OASIS. If the supplier is not in OASIS, the certificate is either fake, pending registration, or issued by a non-recognized body.
How to check:
| OASIS Status | Meaning | Action |
|---|---|---|
| Certified | Active, valid certificate | Proceed to Step 2 (scope check) |
| Suspended | Temporary hold — usually for unresolved nonconformity | Do not accept. Supplier must resolve suspension before you can qualify them. |
| Withdrawn | Certificate revoked or not renewed | Do not accept. Supplier must re-certify from scratch. |
| Not found | No record in OASIS | Certificate is either fake, from a non-IAQG body, or pending initial registration. Do not accept until resolved. |
Not all certification bodies are equal. AS9100 certificates can only be issued by certification bodies accredited under the IAQG International Controlled Other Party (ICOP) scheme, per SAE AS9104/1. A certificate from a non-recognized body — even if the supplier is genuinely audited — is not accepted by Boeing, Airbus, or any major OEM.
How to verify the certification body:
A valid AS9100 certificate does not mean the supplier can do everything. Every certificate includes a scope statement that defines exactly what processes, products, and locations are covered. If your order requires a process outside the scope, the certificate does not protect you.
What to check on the scope statement:
| Fraud Type | What It Looks Like | How to Catch It | Consequence if Missed |
|---|---|---|---|
| Photoshopped certificate | Altered dates, company name, or scope on a real certificate template | OASIS search: name, scope, and dates won’t match | Unqualified supplier in aerospace supply chain; potential FAA action |
| Expired certificate | Real certificate, but surveillance audit was missed or certification lapsed | OASIS status shows “Suspended” or “Withdrawn”; check expiration date on cert | Supplier is operating without a valid QMS; OEM audit finding |
| Scope mismatch | Certificate is real and current, but scope says “machining of aluminum parts” while you need Inconel heat treatment | Read the scope statement on the certificate; cross-check with your RFQ requirements | Special process done outside accreditation; lot rejection |
| Non-recognized certification body | Certificate looks official, issued by a body not on the IAQG ICOP list | Cross-check CB name against IAQG ICOP recognized bodies list in OASIS | Certificate is worthless for aerospace supply; OEM will reject it |
Use this template when qualifying a new China CNC supplier. It covers all three verification steps in one communication:
AS9100 certification follows a 3-year cycle with annual surveillance audits:
| Year | Audit Type | What Happens |
|---|---|---|
| Year 0 | Initial certification audit (Stage 1 + Stage 2) | Full QMS audit. If passed, certificate issued for 3 years. |
| Year 1 | Surveillance audit 1 | Partial audit — focuses on key processes, corrective actions, and continuous improvement. |
| Year 2 | Surveillance audit 2 | Partial audit — different sample of processes. If major nonconformity found, certificate may be suspended. |
| Year 3 | Recertification audit | Full QMS audit again. Certificate renewed for another 3-year cycle. |
Key point for buyers: Between surveillance audits, a supplier’s QMS can degrade. The certificate date alone does not guarantee current compliance. This is why OASIS status checks should be done before every new order, not just at initial qualification. If OASIS shows “Suspended,” the supplier failed a surveillance audit and has not yet resolved the nonconformity.
| # | Check | Why |
|---|---|---|
| 1 | Search OASIS for supplier’s exact legal name | Confirms certificate is registered and active |
| 2 | Verify OASIS status = “Certified” | Rules out suspended or withdrawn certificates |
| 3 | Cross-check certification body against IAQG ICOP list | Rules out non-recognized bodies |
| 4 | Read the scope statement on the certificate | Confirms process, product, material, and location coverage |
| 5 | Check certificate expiration date and last surveillance audit date | Rules out expired certificates |
| 6 | Verify manufacturing location matches certified address | Rules out unlisted production sites |
| 7 | For special processes, verify Nadcap accreditation (eAuditNet) | AS9100 alone does not cover special processes |
| 8 | Request OASIS admin access to audit reports | Shows surveillance history and any open nonconformities |
Search the IAQG OASIS database (oasis.intl-aesq.org) for the supplier’s exact legal name. If the certificate is real, the supplier will appear with a “Certified” status. If they do not appear, or their status shows “Suspended” or “Withdrawn,” the certificate is not valid. OASIS is the single source of truth — every legitimate AS9100 certificate must be registered there.
The certification body must be accredited under the IAQG ICOP (International Controlled Other Party) scheme, per SAE AS9104/1. Major recognized bodies include NSF-ISR, BSI, SGS, Bureau Veritas, DNV, Intertek, NQA, and TÜV SÜD. In China, CEPREI (赛宝认证中心) received ANAB accreditation in 2025. A certificate from any other body is not accepted by Boeing, Airbus, or major OEMs. Cross-check the CB name in the OASIS record against the ICOP recognized list.
No. An expired certificate means the supplier no longer has a valid aerospace QMS. They cannot legally claim AS9100 compliance, and any parts shipped under an expired certificate will be rejected during OEM incoming inspection or audit. The supplier must complete a recertification audit (full Stage 1 + Stage 2) before they can resume aerospace supply.
OASIS (Online Aerospace Supplier Information System) is the IAQG-managed database that stores all AS9100/AS9110/AS9120 certification records, audit results, and supplier information. It matters because it is the only authoritative source for verifying certification status. IAQG policy requires every certified organization to be listed in OASIS; if a supplier refuses OASIS registration, their certification body is required to withdraw the certificate. Buyers can register for free and search any supplier’s status.
Four things: (1) Process coverage — does it include the process you need (e.g., CNC machining, not just assembly)? (2) Product coverage — does it cover the product type? (3) Material coverage — does it include the material families you are ordering? (4) Location coverage — is the manufacturing site the same as the certified address? A scope that says “CNC machining of aluminum components” does not cover Inconel heat treatment.
Before every new purchase order. AS9100 certification follows a 3-year cycle with annual surveillance audits. Between audits, a supplier can be suspended if they fail a surveillance audit and do not resolve nonconformities in time. Checking OASIS before each PO catches suspensions and withdrawals that you would miss if you only verified at initial qualification.
No. AS9100 includes all of ISO 9001:2015 plus additional aerospace-specific requirements: configuration management (AS9100D §4.11), key characteristics management (AS9103), risk management, counterfeit parts prevention, and special process control. An ISO 9001 certificate alone is not sufficient for aerospace supply. Boeing, Airbus, and all major OEMs explicitly require AS9100 (or EN 9100 / JIS Q 9100).
Our AS9100D quality system is registered in OASIS and available for your verification. Scope covers precision CNC machining of aluminum, titanium, stainless steel, and high-temperature alloys for aerospace applications.
Request a Quote