From 2a80b171ecd2139bdd0e4d4bfe9d18165dd09d8b Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 9 Dec 2024 16:26:55 +0100
Subject: [PATCH] Actually check that we were given THE apex, not AN apex.

---
 src/sign/records.rs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/sign/records.rs b/src/sign/records.rs
index a2c1ab57d..c9018fe51 100644
--- a/src/sign/records.rs
+++ b/src/sign/records.rs
@@ -1378,7 +1378,9 @@ where
         let apex_ttl = families.peek().and_then(|first_family| {
             first_family
                 .records()
-                .find(|rr| rr.rtype() == Rtype::SOA)
+                .find(|rr| {
+                    rr.owner() == apex.owner() && rr.rtype() == Rtype::SOA
+                })
                 .map(|rr| rr.ttl())
         });