Apex domains cannot have CNAME records.
Question and response
Question
dig ma. NS
Answer
ma. 5 NS ns-ma.nic.fr.
ma. 5 NS a.tld.ma.
ma. 5 NS d.tld.ma.
ma. 5 NS e.tld.ma.
ma. 5 NS b.tld.ma.
ma. 5 NS dns.inria.fr.
ma. 5 NS c.tld.ma.
ma. 5 NS f.tld.ma.
Authority
The response has no authority records.
Additional
a.tld.ma. 172173 A 81.192.171.83
a.tld.ma. 172173 A 81.192.171.131
b.tld.ma. 172173 A 81.192.171.84
b.tld.ma. 172173 A 81.192.171.132
c.tld.ma. 172173 A 81.192.171.115
c.tld.ma. 172173 A 81.192.171.139
d.tld.ma. 172173 A 81.192.171.116
d.tld.ma. 172173 A 81.192.171.140
e.tld.ma. 32851 A 105.73.80.236
f.tld.ma. 32851 A 41.214.240.4
dns.inria.fr. 5 A 193.51.208.13
a.tld.ma. 172173 AAAA 2001:4288:1800:186:0:0:0:3
b.tld.ma. 172173 AAAA 2001:4288:1800:186:0:0:0:4
c.tld.ma. 172173 AAAA 2001:4288:1800:386:0:0:0:3
d.tld.ma. 172173 AAAA 2001:4288:1800:386:0:0:0:4
f.tld.ma. 32851 AAAA 2c0f:fb20:100:fc:0:0:0:33
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0