This looks like an example you could use to validate XML Digital Signatures with Flex/Air:
http://www.adobe.com/devnet/air/flex...ignatures.html
It includes a sample for creating them with Java, which if you
had to do on the client machine you could hook into the Java app with
Merapi.