You mention 5 mA as a UL limit. I assume you are referring to the UL1950 standard. Other standards have different leakage current limits, the most common being 3.5 mA for non medical devices, 300 uA for cord connected, non patient contact medical devices and 5mA for "Hard wired" medical devices. In all cases, the methodology for taking the measurements are outlined within each standard. I suggest you get a hold of your regulatory person/agency and ask them how you should do an "engineering evaluation" of the leakage current. Measurements taken for the record incorporate specialized Leakage Current meters and require specific power sources.
Good luck