mxml: Update URL and use PKG_HASH instead of PKG_MD5SUM