Apex domains cannot have CNAME records.
Question and response
Question
dig ke. NS
Answer
ke. 5 NS ns.anycast.kenic.or.ke.
ke. 5 NS kenic.anycastdns.cz.
ke. 5 NS mzizi.kenic.or.ke.
ke. 5 NS ns-ke.afrinic.net.
Authority
The response has no authority records.
Additional
ns.anycast.kenic.or.ke. 143850 A 204.61.216.7
mzizi.kenic.or.ke. 62563 A 196.1.4.3
mzizi.kenic.or.ke. 62563 A 196.1.4.130
mzizi.kenic.or.ke. 62563 A 196.13.202.53
ns.anycast.kenic.or.ke. 143850 AAAA 2001:500:14:6007:ad:0:0:1
mzizi.kenic.or.ke. 62563 AAAA 2001:43f8:10:0:50c0:a8ff:feee:30
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0