But the DESTROY function is never invoked.

DESTROY will only be (automatically) called on objects that have beem blessed into package OpenCA::OpenSSL::CRL.
Do you have such objects ?

Cheers,
Rob