Apex domains cannot have CNAME records.
Question and response
Question
dig icann.org. NS
Answer
icann.org. 5 NS a.icann-servers.net.
icann.org. 5 NS ns.icann.org.
icann.org. 5 NS c.icann-servers.net.
icann.org. 5 NS b.icann-servers.net.
Authority
The response has no authority records.
Additional
a.icann-servers.net. 5 A 199.43.135.53
b.icann-servers.net. 5 A 199.43.133.53
c.icann-servers.net. 5 A 199.43.134.53
ns.icann.org. 5 A 199.4.138.53
a.icann-servers.net. 5 AAAA 2001:500:8f:0:0:0:0:53
b.icann-servers.net. 5 AAAA 2001:500:8d:0:0:0:0:53
c.icann-servers.net. 5 AAAA 2001:500:8e:0:0:0:0:53
ns.icann.org. 5 AAAA 2001:500:89:0:0:0:0:53
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0