A Transport PDU before network-layer encryption.
Application Identifier -- 6-bit value derived from AppKey (via K4).
Application Key Flag -- true if encrypted with AppKey, false for DeviceKey.
Whether this segment is the final one.
Whether this is a segmented message.
Payload (encrypted upper transport PDU or segment thereof).
Last segment number (total segments - 1).
Segment offset (which segment this is, 0-based).
Sequence number (24-bit, lower portion).
Total number of segments.
Transport MIC (32-bit for unsegmented, 64-bit for segmented).