diff --git a/CHANGES b/CHANGES
index 392e88d0f7..f559de2b29 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+	--- 9.11.3rc1 released ---
+
 4889.	[func]		Warn about the use of old root keys without the new
 			root key being present.  Warn about dlv.isc.org's
 			key being present. Warn about both managed and
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 3e8c8b3a17..ec761018c8 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -159,6 +159,13 @@
 	  anchor results in a warning being issued.
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  <command>named</command> will now log a warning if the old
+	  root DNSSEC key is explicitly configured and has not been updated.
+	  [RT #43670]
+	</para>
+      </listitem>
     </itemizedlist>
   </section>
 
diff --git a/lib/bind9/api b/lib/bind9/api
index d7c46cae29..9ba074f4e7 100644
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 160
-LIBREVISION = 5
+LIBREVISION = 6
 LIBAGE = 0
diff --git a/lib/dns/api b/lib/dns/api
index 7b1b2b1bb4..9d5a98d20c 100644
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 1100
+LIBINTERFACE = 1101
 LIBREVISION = 0
-LIBAGE = 0
+LIBAGE = 1
diff --git a/lib/isc/api b/lib/isc/api
index d9db6fea40..6a6402fc05 100644
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 169
-LIBREVISION = 0
+LIBREVISION = 1
 LIBAGE = 0
diff --git a/version b/version
index b53712bf4e..ca1d343174 100644
--- a/version
+++ b/version
@@ -6,6 +6,6 @@ DESCRIPTION="(Extended Support Version)"
 MAJORVER=9
 MINORVER=11
 PATCHVER=3
-RELEASETYPE=b
+RELEASETYPE=rc
 RELEASEVER=1
 EXTENSIONS=