OpenSSL: How to check if a certificate matches a private key

openssl x509 -noout -modulus -in example.crt | openssl md5

openssl rsa -noout -modulus -in example.key | openssl md5

Should be equal.