example.com. IN TXT "v=spf1 ip4:192.0.2.0/24 ip6:[2001:db8::/32] -all"
More often ip6:[2001:db8::]/32 -- mask outside. Not always uniform everywhere, though. Ari