Spurious "TYPE65534" at the end of a NSEC3, why?

[Stephane Bortzmeyer]

On Mon, Feb 14, 2011 at 01:50:49PM +1100,
 Mark Andrews <marka at isc.org> wrote 
 a message of 40 lines which said:

> I could reproduce it in 9.7.1-P1 by just adding a DNSKEY record at
> the apex

I cannot reproduce it. Any more detailed instructions? It will be more
difficult to convince the people in charge of the operations to
upgrade if I cannot exhibit a test case...