Not an apex domain
The domain spf.us-1.a.mimecastprotect.com is not the root of its zone.
Instead, try zone transfer on us-1.a.mimecastprotect.com .
Instead, try zone transfer on us-1.a.mimecastprotect.com .