The problem was not to figure out, where the XML is not valid, it was to find the reason for the problem - which was - as mentioned before the tar command rebuilding the .apm files.
Unfortunately, there are two different places, where the identical code lives, and openacs.org differs in this respect from other versions. I missed yesterday the second spot and fixed the second spot and the repository again. Let us hope, it survives this night correctly.