Please take a look at draft-ietf-krb-wg-gssapi-cfx-07.txt not RFC 1964 for the encoding of AES GSS tokens.