This question already has an answer here:

I have the following requirement: There are N public/private RSA key pairs. The encrypted data must be decryptable by any of the private keys alone, but not by any other key. For encryption, the server knows and may utilize all the public keys for encryption if the scheme requires so. Does such a scheme exists?


marked as duplicate by SEJPM Oct 17 '18 at 12:04

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.