Apex domains cannot have CNAME records.
Question and response
Question
dig nic.legal. NS
Answer
nic.legal. 5 NS v2n1.nic.legal.
nic.legal. 5 NS v0n2.nic.legal.
nic.legal. 5 NS v0n0.nic.legal.
nic.legal. 5 NS v0n1.nic.legal.
nic.legal. 5 NS v0n3.nic.legal.
nic.legal. 5 NS v2n0.nic.legal.
Authority
The response has no authority records.
Additional
v0n0.nic.legal. 171806 A 65.22.20.12
v0n1.nic.legal. 171806 A 65.22.21.12
v0n2.nic.legal. 171806 A 65.22.22.12
v0n3.nic.legal. 171806 A 161.232.10.12
v2n0.nic.legal. 171806 A 65.22.23.12
v2n1.nic.legal. 171806 A 161.232.11.12
v0n0.nic.legal. 171806 AAAA 2a01:8840:16:0:0:0:0:12
v0n1.nic.legal. 171806 AAAA 2a01:8840:17:0:0:0:0:12
v0n2.nic.legal. 171806 AAAA 2a01:8840:18:0:0:0:0:12
v0n3.nic.legal. 171806 AAAA 2a01:8840:f4:0:0:0:0:12
v2n0.nic.legal. 171806 AAAA 2a01:8840:19:0:0:0:0:12
v2n1.nic.legal. 171806 AAAA 2a01:8840:f5:0:0:0:0:12
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0