History lesson I am afraid. Token Ring had a burnt in address (bia) and a local administrated address (laa) which began with a 4. So a Token Ring Card would have two addresses. The LAA would be used to indicate location. For example 4000.0001.xxxx would be allocated to all PC on site 0001. Remember we are in the mid 80's so IP is not widespread. Each site would have a bridge which connected to other sites. The Token Ring Bridge inspected the site code and passed traffic along the link. Please remember this links would be very small such as 64Kbs without the site code the bridge would have to build the MAC table from traffic on the 64Kb link. Hence we have two addresses.
Another reason that it shows twice is due to the fact that the first one can be changed.
Changing your MAC address from the default is what we call MAC spoofing. This term has a negative connotation because its more popular uses are for improper activities, particularly wireless network hacking. However, MAC spoofing does have legitimate uses, such as testing MAC filtering.
To change your MAC address on a Cisco router, use the mac-address command while in Interface Configuration Mode. Just use the command with the new MAC address-it's that simple.
Once you change it, the BIA gives you a way to see the original when you need to change it back.