AES 256-bit ZMK or Transport Key and its components:

AES 256-bit ZMK Thales Key Block

10128K0AB00E0001621A494BAE25F0BBA064A6C3AEFCD1C7BAC743A4FEB5DA054237153FE4B7583CE8819F2FB1D69A3ECC8153302D21F4A9CEC79A459D076D88

ZMK in clear/plaintext

B31827B907B7A2D1E86B809070B3EAF6CF7EBA57CB68D8D7CE01B5443C6CDFD7
AES CMAC Calculation to ZMK for Key Verification Code
236B4E89E39C289CE8DA27E56BBE55C2
so AES 256-bit ZMK KVC
236B4E

AES ZMK Component 1:

1BD9C2A29846B439DFE868F4EAB4914BD7DA71004785058CD55E57A9CEEDCAEA
Key Check Value
4384B5

AES ZMK Component 2:

62CB437131C129DF001D42676011975150506E2A382145FD9BDEA7EC5A339F63
Key Check Value
4AEC72

AES ZMK Component 3:

CA0AA66AAE303F37379EAA03FA16ECEC48F4A57DB4CC98A680814501A8B28A5E
Key Check Value
5833DA

AES ZMK Combined (all components):

B31827B907B7A2D1E86B809070B3EAF6CF7EBA57CB68D8D7CE01B5443C6CDFD7
Key Check Value: 236B4E

AES 256-bit BDK Thales Key Block

1012841AN00E00012F84D515D2D33E3A59BAFEDA86BD9099E4D555015DEED55A03753CEE02FAD3BDF796A5F67504474E40CFFE1D67E7C8D773321FD92BBBF2E9
KVC
E06B10

AES 256-bit BDK Key in clear/plaintext

E67FDA97D06347E9111DB77D43CB90B03D7B0791EC561FDAE656E54AF17A49BD

AES 256-bit BDK in TR-31 Format

This is the key material that would be exchanged between Connextor’s client and CONNEX.

Export the AES 256-bit BDK encrypted under ZMK using TR-31 Format (version D).
RD0144B0AN00N0000544071E2D82862B35375E668E01717EE8664F3AB23ABB1DD5CFB9497709195C68724F0ADF0FBE5BBB615EA676BA859489BC3B8B06CF2FB1B2C05524CD774CB2DE06B10
KVC
E06B10

A Better option (perhaps)

This is another option where no custodians are needed.