Message 0x40 is defined in: 9.5.6.1 Channel Response / Event (0x40)
Just double checking here - is this the correct message to query? Im asking since that section mentions nothing about querying - just about response, and those responses seem to be channel specific. Query for device capabilities doesnt seem to be a channel operation, so Im still a little confused.