diff --git a/tests-extra/tests/dnssec/add_remove/data/example.zone.9 b/tests-extra/tests/dnssec/add_remove/data/example.zone.9
new file mode 100644
index 000000000..123ec2ca4
--- /dev/null
+++ b/tests-extra/tests/dnssec/add_remove/data/example.zone.9
@@ -0,0 +1,39 @@
+; This zone comes from RFC-4035
+example.	3600 IN SOA	ns1.example. bugs.x.w.example. 1081539420 3600 300 3600000 3600
+example.	3600 IN NS	ns1.example.
+example.	3600 IN NS	ns2.example.
+example.	3600 IN MX	1 xx.example.
+ns1.a.example.	3600 IN A	192.0.2.5
+ns2.a.example.	3600 IN A	192.0.2.6
+ns1.b.example.	3600 IN A	192.0.2.7
+ns2.b.example.	3600 IN A	192.0.2.8
+a.example.	3600 IN NS	ns1.a.example.
+a.example.	3600 IN NS	ns2.a.example.
+a.example.	3600 IN DS	57855 5 1 B6DCD485719ADCA18E5F3D48A2331627FDD3636B
+*.a.example. 3600 IN A 192.0.2.11
+ai.example.	3600 IN A	192.0.2.9
+ai.example.	3600 IN HINFO	"KLH-10" "ITS"
+ai.example.	3600 IN AAAA	2001:db8::f00:baa9
+b.example.	3600 IN NS	ns1.b.example.
+b.example.	3600 IN NS	ns2.b.example.
+ns1.example.	3600 IN A	192.0.2.1
+ns2.example.	3600 IN A	192.0.2.2
+*.w.example.	3600 IN MX	1 ai.example.
+x.y.w.example.	3600 IN MX	1 xx.example.
+xx.example.	3600 IN A	192.0.2.10
+xx.example.	3600 IN HINFO	"KLH-10" "TOPS-20"
+xx.example.	3600 IN AAAA	2001:db8::f00:baaa
+x.w.example.	3600 IN MX	1 xx.example.
+*.to-apex.example. 3600 IN CNAME example. ; Wildcard expansion leading to apex
+*.to-nxdomain.example. 3600 IN CNAME nxdomain.example. ; Wildcard expansion leading to nonexistent name
+new-node IN A 1.2.3.4 ; added new node
+new-node IN A 1.2.3.5 ; added new RR
+new-node IN TXT "test" ; added new RR type
+below.cut.a IN A 1.2.3.4 ; added new glue
+b IN DS 57855 5 1 B6DCD485719ADCA18E5F3D48A2331627FDD3636B ; added new secure delegation
+non.terminal IN A 1.2.3.4 ; added authoritative non-terminal node
+very.long.non.terminal IN A 1.3.3.7 ; added extra authoritative non-terminal node
+a.example. 3600 IN DS 57854 5 1 B6DCD485719ADCA18E5F3D48A2331627FDD3636B ; added two new DSs
+a.example. 3600 IN DS 57856 5 1 B6DCD485719ADCA18E5F3D48A2331627FDD3636B ; tests sorting
+non-apex		3600	IN	DNSKEY	256 3 5 AwEAAbs0AlA6xWQn/lECfGt3S6TaeEmgJfEVVEMh06iNMNWMRHOfbqLF h3N52Ob7trmzlrzGlGLPnAZJvMB8lsFGC5CtaLUBD+4xCh5tl5QifZ+y o+MJvPGlVQI2cs7aMWV9CyFrRmuRcJaSZU2uBz9KFJ955UCq/WIy5KqS 7qaKLzzN
+non-apex		3600	IN	DNSKEY	257 3 5 BQEAAAABt3LenoCVTV0okqKYPDnnVJqvwCD9MKJNXg8fcOCdLQYncyoe hpwM5RK2UkZDcDxWkMo7yMa35ej+Mhpaji9si4xXD+Syl4Q06LFiFkdN /5GlVlrIdE3GW7zC7Z4sS14Vz8FbYfcRmhsh19Ob718jGZneGfw2UPbv kyxUR8wD7mguZn02fQ6tjj/Ktp4uSW9tpz3bjGMo2rX+iZk4xgbPaesA OlR/AaHdatGZsWC9CPon8mnLZeu6czm8CBDgBmnf3PE8c5+uyWj1Pw4p p0VQmnX5UrnuGpErg7qXhJm7wY2CRVRMcLX3zmjVWXW1uT9JFh2G+/pZ zxnASfKKltZpuw== ; added non-apex DNSKEYs
diff --git a/tests-extra/tests/dnssec/add_remove/test.py b/tests-extra/tests/dnssec/add_remove/test.py
index 77b51a74b..5c6622ffd 100644
--- a/tests-extra/tests/dnssec/add_remove/test.py
+++ b/tests-extra/tests/dnssec/add_remove/test.py
@@ -5,7 +5,7 @@
 from dnstest.utils import *
 from dnstest.test import Test
 
-CHANGE_COUNT = 8
+CHANGE_COUNT = 9
 
 def update_zone(master, slave, zone, changes, change_serial=False, serials=None):
     for i in changes: