Apex domains cannot have CNAME records.
Question and response
Question
dig tld.ma. NS
Answer
tld.ma. 5 NS b.tld.ma.
tld.ma. 5 NS c.tld.ma.
tld.ma. 5 NS d.tld.ma.
tld.ma. 5 NS a.tld.ma.
Authority
The response has no authority records.
Additional
a.tld.ma. 168901 A 81.192.171.83
a.tld.ma. 168901 A 81.192.171.131
b.tld.ma. 168901 A 81.192.171.84
b.tld.ma. 168901 A 81.192.171.132
c.tld.ma. 168901 A 81.192.171.115
c.tld.ma. 168901 A 81.192.171.139
d.tld.ma. 168901 A 81.192.171.116
d.tld.ma. 168901 A 81.192.171.140
a.tld.ma. 168901 AAAA 2001:4288:1800:186:0:0:0:3
b.tld.ma. 168901 AAAA 2001:4288:1800:186:0:0:0:4
c.tld.ma. 168901 AAAA 2001:4288:1800:386:0:0:0:3
d.tld.ma. 168901 AAAA 2001:4288:1800:386:0:0:0:4
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0