That configuration has VLAN 1 untagged plus VLAN 11 tagged on ether1, VLAN 11 untagged on ether2, and only VLAN 1 on the implicit CPU bridge port. If you use any other VLANs for your SSIDs no traffic will pass unless that VLAN is tagged on the port connected upstream (ether1 in this case) AND on the bridge itself (the implicit CPU bridge port) to make the VLAN accessible to the CPU for the wireless driver - see http://forum.mikrotik.com/t/routeros-bridge-mysteries-explained/147832/1
Given that the cAP ac has a gigabit switch chip you could go back to your previous non-VLAN-aware setup and just configure the switch chip https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Setup_Examples, again the switch-to-CPU switch port should be included in the switch VLAN list.