The way I read "550 Message rejected because SPF check failed", it means the SPF record doesn't include the mail server that the email is sent from. I don't think the SPF record itself is malformed - as you say MXToolBox confirms it's valid. So if it's a real problem, just whitelist the sending mail server, so that it doesn't check for SPF.
pca shows 2022