This is basic vlan filtering…
Read the bible (has examples for both switch and router) → http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
A decent video for switch – > https://www.youtube.com/watch?v=YLtGQAQ8iS0
I will hold you responsible for reading and applying the above knowledge. 
The only tricky part is the fact that the trunk port from the switch to the router carries both data vlans and the management/trusted vlan (normal) but also carries the internet vlan ( traffic captured into a vlan to carry it through the trunk port to be terminated on the router.
Both devices get one bridge.
The switch only needs the management/trusted vlan defined.
This is the only vlan-id, on the switch, that includes bridge being tagged on /interface bridge vlan settings.
On the router one has
All vlans defined as being part of the bridge.
The internet vlan does not get any dhcp, pool etc…
/interface bridge vlan
add bridge=bridge tagged=bridge,trunkport(to switch) vlan-id=InternetvlanID
/ip dhcp client
interface=name-internetVLAN