CloudFlare has DNSSEC and a REST API (https://api.cloudflare.com/) but not SSHFP at this time, that's likely coming in the not too distant future though.
I believe Rage4 https://rage4.com/ checks all the boxes you're looking for.
Disclaimer: I work at CloudFlare.